7517 matches found
IBM Concert Information Disclosure Vulnerability
IBM Concert is a new tool from International Business Machines IBM Inc. that uses generative AI to help manage complex cloud-native applications. A security vulnerability exists in IBM Concert version 1.0 that stems from not setting a security attribute on an authorization token or session cookie...
CVE-2024-8269: Improper Access Control
The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to unauthorized user registration in all versions up to, and including, 4.15.3. This is due to the plugin not checking that user registration is enabled prior to creating a user account through the...
Living off the land, GPO style
TL;DR The ability to edit Group Policy Object GPOs from non-domain joined computers using the native Group Policy editor has been on my list for a long time. This blog post takes a deep dive into what steps were taken to find out why domain joined machines are needed in the first place and what...
CVE-2024-37966
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability...
CVE-2024-37338
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...
CVE-2024-37340
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...
CVE-2024-37342
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability...
CVE-2024-37339
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...
CVE-2024-37338
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...
CVE-2024-37340
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...
CVE-2024-37335
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...
CVE-2024-37337
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability...
CVE-2024-37335
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...
CVE-2024-26191
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...
CVE-2024-26186 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
...
CVE-2024-26186
CVE-2024-26186 is a Microsoft SQL Server Native Scoring remote code execution vulnerability. The Nessus/NVD data show exploitation requires network access with low attack complexity and low privileges, yielding high impact (C/H/I/A) per CVSS v3.1 (8.8, HIGH). Connected updates indicate affected p...
CVE-2024-26186 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
...
CVE-2024-37339 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
...
