5011 matches found
CVE-2023-25773
Improper access control in the IntelR UniteR Hub software installer for Windows before version 4.2.34962 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-25773
Improper access control in the IntelR UniteR Hub software installer for Windows before version 4.2.34962 may allow an authenticated user to potentially enable escalation of privilege via local access...
Intel Unite Security Vulnerability
Intel Unite is a suite of enterprise meeting collaboration solutions from Intel Corporation USA. A security vulnerability exists in IntelR UniteR Hub prior to version 4.2.34962 that stems from improper access control. An attacker could exploit the vulnerability to elevate privileges...
PT-2023-20293 · Intel · Intel Unite Hub
Name of the Vulnerable Software and Affected Versions: IntelR UniteR Hub software installer for Windows versions prior to 4.2.34962 Description: The issue is related to improper access control in the IntelR UniteR Hub software installer for Windows, which may allow an authenticated user to...
Intel® Unite® Hub Software August 2023 Security Update
Intel has informed HP of a potential vulnerability identified in the Intel® Unite® Hub software, which may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP has...
Intel® Unite® Software Advisory
Summary: Potential security vulnerabilities in some Intel® Unite® software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-25773 Description: Improper access control in the IntelR UniteR Hub...
the unfollow contract does random unfollow process of random follow token.
Lines of code Vulnerability details Impact in the FollowNft.sol we have to unfollow function this function is supposed to do unfollow process but as you see the followTokenId variable just returns one random follow id with profile id through mapping and there is no option to select which follow n...
Solidres, 2.13.3, hub plugin XSS (Cross Site Scripting)
https://www.solidres.com/forum/report-bugs/12031-vulnerability-joomla-solidres-2-13-3-reflected-xss...
Important: Red Hat Bug Fix Advisory: Red Hat OpenShift Pipelines 1.10.5 release
Red Hat OpenShift Pipelines 1.10.5 General Availability release - A cloud-native Continuous Integration and Delivery solution on OpenShift. Red Hat OpenShift Pipelines is a cloud-native continuous integration and delivery CI/CD solution for building pipelines using Tekton. Tekton is a flexible,...
A week in security (July 17 - 23)
Last week on Malwarebytes Labs: CISA: You've got two weeks to patch Citrix NetScaler vulnerability CVE-2023-3519 Estee Lauder targeted by Cl0p and BlackCat ransomware groups Google fixes "Bad.Build" Cloud Build flaw, researchers say it's not enough Accidental VirusTotal upload is a valuable...
OESA-2023-1437 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb-cb initialization in the ipvlan network...
Docker Hub images found to expose secrets and private keys
Numerous Docker images shared on Docker Hub are exposing sensitive data, according to a study conducted by researchers at the German university RWTH Aachen. Needless to say, this poses a significant security risk. In traditional software development, programmers code an application in one computi...
SUSE SLED15: cluster-md-kmp-64kb / cluster-md-kmp-default / dlm-kmp-64kb / etc (SUSE-SU-2023:2820-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2820-1 advisory. The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. Th...
The vulnerability of the ishtp_cl_get_dma_send_buf() function in the driver of the Integrated Sensor Hub (ISH) for Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the ishtpclgetdmasendbuf function in the Linux operating system’s Integrated Sensor Hub ISH driver lies in pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the amd_sfh_hid_client_init() function in the AMD Sensor Fusion Hub driver for Linux operating systems allows a hacker to induce a service failure.
The vulnerability of the amdsfhhidclientinit function in the AMD Sensor Fusion Hub driver for Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver. This issue could allow a local user to crash the system.
...
A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver. This flaw allows a local user to crash the system.
...
CVE-2023-25102
Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...
PT-2023-5071 · Milesight · Milesight Ur32L
Name of the Vulnerable Software and Affected Versions: Milesight UR32L version 32.3.0.5 Description: Multiple buffer overflow vulnerabilities exist in the vtysh ubus binary due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An...
CVE-2020-23452
A cross-site scripting XSS vulnerability in Selenium Grid v3.141.59 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the hub parameter under the /grid/console page...