11397 matches found
CVE-2024-35229 ZKsync Era evaluation order of Yul function arguments
ZKsync Era is a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. Prior to version 1.3.10, there is a very specific pattern fa,b; checkifaexecutedlast in Yul that exposes a bug in evaluation order of Yul function arguments. This vulnerability has been fixed in version 1.3.10. As a...
Experts Find Flaw in Replicate AI Service Exposing Customers' Models and Data
Cybersecurity researchers have discovered a critical security flaw in an artificial intelligence AI-as-a-service provider Replicate that could have allowed threat actors to gain access to proprietary AI models and sensitive information. "Exploitation of this vulnerability would have allowed...
2024-05 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5039705)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
CVE-2024-4622
CVE-2024-4622 affects alpitronic Hypercharger EV charging devices. When credentials are left at defaults, an attacker can gain administrator access to the device via the web interface. The vulnerability is network-exposed with low attack complexity and can impact availability (HIGH) and confident...
Hypercharger EV Charger 安全漏洞
The Hypercharger EV Charger is a class of high power electric vehicle EV chargers from Hypercharger. A security vulnerability exists in the Hypercharger EV Charger that stems from the use of default credentials, which allows an attacker to access the device as an administrator using public...
KYKMS 安全漏洞
KYKMS is a knowledge base management system. KYKMS suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when malicious data is viewed...
2024-05 Cumulative Update for Windows 11 for ARM64-based Systems (KB5037770)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2024-05 Cumulative Update for Windows 11 for x64-based Systems (KB5037770)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2024-05 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5037848)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...
2024-05 Dynamic Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5037768)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
2024-05 Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems (KB5037768)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2024-05 Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems (KB5037768)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2024-05 Dynamic Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5037768)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
2024-05 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5037768)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2024-05 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5037763)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v18.0 Release – May 2024 (KB5023057)
Update for Azure File Sync agent version 18.0.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v18.0 Release – May 2024 (KB5023057)
Update for Azure File Sync agent version 18.0.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v18.0 Release – May 2024 (KB5023057)
Update for Azure File Sync agent version 18.0.0.0. For more details, see the associated Microsoft Knowledge Base article...
Cross-site Scripting (XSS)
knowledge-repo is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper user input validation in the post comments functionality. This allows an attacker to inject arbitrary web scripts or HTML content into the application, potentially leading to cross-site scripting XSS...
