io.apiman:apiman-manager-api-micro (2.1.4.final), io.apiman:apiman-manager-test-api (2.1.4.final) +1 more potentially affected by CVE-2023-28640 via io.apiman:apiman-manager-api-rest-impl (2.1.4.final)

io.apiman:apiman-manager-api-rest-impl MAVEN version 2.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.apiman:apiman-manager-api-rest-impl and may be impacted: - io.apiman:apiman-manager-api-micro 2.1.4.final -...

io.apiman:apiman-manager-api-micro (1.5.5.final), io.apiman:apiman-manager-api-war (1.5.5.final) +3 more potentially affected by CVE-2023-28640 via io.apiman:apiman-manager-api-rest-impl (1.5.5.final)

io.apiman:apiman-manager-api-rest-impl MAVEN version 1.5.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.apiman:apiman-manager-api-rest-impl and may be impacted: - io.apiman:apiman-manager-api-micro 1.5.5.final -...

io.apiman:apiman-distro-db (1.1.6.final), io.apiman:apiman-distro-db-es (1.1.6.final) +8 more potentially affected by CVE-2023-28640 via io.apiman:apiman-manager-api-rest-impl (1.1.6.final)

io.apiman:apiman-manager-api-rest-impl MAVEN version 1.1.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.apiman:apiman-manager-api-rest-impl and may be impacted: - io.apiman:apiman-distro-db 1.1.6.final - io.apiman:apiman-distro-db-es...

io.apiman:apiman-manager-api-micro (1.2.7.beta1), io.apiman:apiman-manager-api-war (1.2.7.beta1) +6 more potentially affected by CVE-2023-28640 via io.apiman:apiman-manager-api-rest-impl (1.2.7.beta1)

io.apiman:apiman-manager-api-rest-impl MAVEN version 1.2.7.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.apiman:apiman-manager-api-rest-impl and may be impacted: - io.apiman:apiman-manager-api-micro 1.2.7.beta1 -...

io.apiman:apiman-manager-api-micro (1.3.5.final), io.apiman:apiman-manager-api-war (1.3.5.final) +3 more potentially affected by CVE-2023-28640 via io.apiman:apiman-manager-api-rest-impl (1.3.5.final)

io.apiman:apiman-manager-api-rest-impl MAVEN version 1.3.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.apiman:apiman-manager-api-rest-impl and may be impacted: - io.apiman:apiman-manager-api-micro 1.3.5.final -...

io.apiman:apiman-manager-api-micro (1.5.3.final), io.apiman:apiman-manager-api-war (1.5.3.final) +3 more potentially affected by CVE-2023-28640 via io.apiman:apiman-manager-api-rest-impl (1.5.3.final)

io.apiman:apiman-manager-api-rest-impl MAVEN version 1.5.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.apiman:apiman-manager-api-rest-impl and may be impacted: - io.apiman:apiman-manager-api-micro 1.5.3.final -...

CVE-2023-28005

A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to an affected device to bypass Microsoft Windows� Secure Boot process in an attempt to execute other attacks to obtain access to the contents of the...

CVE-2023-28005

A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to an affected device to bypass Microsoft Windows� Secure Boot process in an attempt to execute other attacks to obtain access to the contents of the...

Trend Micro Endpoint Encryption security vulnerabilities

Trend Micro Endpoint Encryption is Trend Micro's solution for encrypting data on a variety of devices such as PCs and Macs, laptops and desktops, USB drives and other removable media. A security vulnerability exists in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and...

AMD Ryzen Master Privilege Escalation

The vulnerability of the AMD Ryzen Master tool for adjusting AMD Ryzen processors is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...

Trend Micro Apex One Multiple Vulnerabilities (000292209)

According to its self-reported version, the Trend Micro application running on the remote Windows host is Apex One prior to SP1 Server Build 11564 and Agent Build 11564. It is, therefore, affected by multiple vulnerabilities: - An uncontrolled search path element vulnerability in the Trend Micro...

AMD KVM DoS

The vulnerability of the AMD KVM subsystem for supporting embedded virtualization in Linux operating systems’ kernels is related to improper handling of embedded termination processes. Exploiting this vulnerability can allow attackers to cause service failures...

Trend Micro TXOne StellarOne Improper Access Control Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Trend Micro TXOne StellarOne. Authentication is required to exploit this vulnerability. The specific flaw exists within the Account endpoint. The issue results from the lack of proper access control. An...

KVM SEV DoS

The vulnerability of the KVM virtualization subsystem in AMD Secure Encrypted Virtualization SEV in the virt/kvm/kvmmain.c kernel of the Linux operating system is related to a breach of processor cache integrity. Exploiting this vulnerability could allow an attacker to trigger a service failure...

CVE-2023-28005

A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to an affected device to bypass Microsoft Windows� Secure Boot process in an attempt to execute other attacks to obtain access to the contents of the...

CVE-2023-28005

Summary: CVE-2023-28005 affects Trend Micro Endpoint Encryption Full Disk Encryption (TMEE FDE) ≤ 6.0.0.3204. The issue enables bypass of the Windows Secure Boot process when an attacker has physical access, potentially enabling further attacks to access device contents. The encrypted drive remai...

CVE-2023-28005

A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to an affected device to bypass Microsoft Windows� Secure Boot process in an attempt to execute other attacks to obtain access to the contents of the...

CVE-2023-28005: Undefined Security Weakness

A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to an affected device to bypass Microsoft Windows� Secure Boot process in an attempt to execute other attacks to obtain access to the contents of the...

Fedora: Security Advisory for python-flask (FEDORA-2023-729a50a7e1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: python-flask-2.2.3-1.fc38

Flask is called a =EF=BF=BD=EF=BF=BD=EF=BF=BDmicro-framework=EF=BF=BD=EF=BF =BD=EF=BF=BD because the idea to keep the core simple but extensible. There is no database abstraction layer, no form validation or anything else where different libraries already exist that can handle that. However Flask...