13572 matches found
KLA77106 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code...
PT-2024-16561 · WordPress · Hash Elements
Name of the Vulnerable Software and Affected Versions: Hash Elements plugin for WordPress versions up to, and including, 1.4.7 Description: The issue is related to unauthorized access of data due to a missing capability check on the hash elements get posts title by id function. This allows...
Fortinet FortiWeb Exposure of password hashes to read-only admin (FG-IR-24-180)
The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-180 advisory. - An exposure of sensitive system information to an unauthorized control sphere vulnerability CWE-497 in FortiWeb version 7.6....
Description of the security update for Microsoft Exchange Server 2019 and 2016: November 12, 2024 (KB5044062)
None None...
CVE-2024-43451
NTLM Hash Disclosure Spoofing Vulnerability Recent assessments: cbeek-r7 at March 10, 2025 6:13pm UTC reported: CVE-2024-43451 is a Windows NTLM hash disclosure vulnerability categorized as a “spoofing” flaw that affects all supported Microsoft Windows versions, including Windows 10, Windows 11,...
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user...
VulnCheck KEV: CVE-2024-43451
Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user...
CVE-2024-51747
creationtimestamp| type| source ---|---|--- 2024-11-11 21:57:37+00:00| seen| https://t.me/cvedetector/10525 2026-06-29 13:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpgmay3nzd24...
Job Recruitment 安全漏洞
Job Recruitment by code-projects is a job portal project developed using PHP, CSS, JavaScript, and MySQL technologies. A security vulnerability exists in Job Recruitment version 1.0, which originates from an SQL injection vulnerability in the ehash parameter of the /activation.php page...
CVE-2024-51718
creationtimestamp| type| source ---|---|--- 2024-11-09 14:08:46+00:00| seen| https://t.me/cvedetector/10341...
CVE-2024-50252 mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumipip: Fix memory leak when changing remote IPv6 address The device stores IPv6 addresses that are used for encapsulation in linear memory that is managed by the driver. Changing the remote address of an ip6gre net...
CVE-2024-50252 mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumipip: Fix memory leak when changing remote IPv6 address The device stores IPv6 addresses that are used for encapsulation in linear memory that is managed by the driver. Changing the remote address of an ip6gre net...
sock_map: Add a cond_resched() in sock_hash_free()
...
i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
...
AZL-52557 CVE-2024-27532 affecting package fluent-bit for versions less than 2.2.3-6
wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR 06df58f is vulnerable to NULL Pointer Dereference in function blocktypegetresulttypes...
CVE-2020-11916
An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. The password for the root user is hashed using an old and deprecated hashing technique. Because of this deprecated hashing, the success probability of an attacker in an offline cracking attack is greatly increased...
CVE-2019-20457
An issue was discovered on Brother MFC-J491DW C1806180757 devices. The printer's web-interface password hash can be retrieved without authentication, because the response header of any failed login attempt returns an incomplete authorization cookie. The value of the authorization cookie is the MD...
CVE-2019-20457
The CVE-2019-20457 entry concerns Brother MFC-J491DW (firmware C1806180757). Affected component is the web interface where authentication can be bypassed to reveal the password hash. The underlying issue is that the response header after failed login attempts returns an incomplete authorization c...
PT-2024-10733 · Brother · Brother Mfc-J491Dw
Name of the Vulnerable Software and Affected Versions: Brother MFC-J491DW version C1806180757 Description: An issue was discovered where the printer's web-interface password hash can be retrieved without authentication. This occurs because the response header of any failed login attempt returns a...
CVE-2019-20457
An issue was discovered on Brother MFC-J491DW C1806180757 devices. The printer's web-interface password hash can be retrieved without authentication, because the response header of any failed login attempt returns an incomplete authorization cookie. The value of the authorization cookie is the MD...