13599 matches found
CVE-2022-4978
Remote Control Server, maintained by Steppschuh, 3.1.1.12 allows unauthenticated remote code execution when authentication is disabled, which is the default configuration. The server exposes a custom UDP-based control protocol that accepts remote keyboard input events without verification. An...
CVE-2025-49747
Missing authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network...
CVE-2025-47995
Weak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network...
CVE-2025-53762
Permissive list of allowed inputs in Microsoft Purview allows an authorized attacker to elevate privileges over a network...
CVE-2025-49746
Improper authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network...
CVE-2025-47995
Weak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network...
CVE-2025-47158
Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...
Azure Machine Learning Elevation of Privilege Vulnerability
Weak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network...
PT-2025-30066 · Microsoft · Azure Machine Learning
Name of the Vulnerable Software and Affected Versions: Azure Machine Learning affected versions not specified Description: Weak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network. Recommendations: At the moment, there is no information abou...
PT-2025-30072 · Microsoft · Purview
Name of the Vulnerable Software and Affected Versions: Microsoft Purview affected versions not specified Description: A permissive list of allowed inputs in Microsoft Purview can allow an authorized attacker to elevate privileges over a network. Recommendations: At the moment, there is no...
Oracle Business Intelligence Publisher (July 2025 CPU)
The 12.2.1.4.0 versions of Oracle Business Intelligence Publisher installed on the remote host are affected by a vulnerability as referenced in the July 2025 CPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Server. Supported versions that are...
CVE-2025-53756
This vulnerability exists in Digisol DG-GR6821AC Router due to cleartext transmission of credentials in its web management interface. A remote attacker could exploit this vulnerability by intercepting the network traffic and capturing cleartext credentials. Successful exploitation of this...
PT-2025-29603 · Oracle · Oracle Database +1
Name of the Vulnerable Software and Affected Versions: Oracle Database versions 19.3 through 19.27 Oracle Database versions 23.4 through 23.8 Description: This issue affects the Oracle Database component of Oracle Database Server. A low-privileged attacker with Create Session and Create Procedure...
DNS Tunneling: Threat Landscape and Improved Detection Solutions
Detecting Domain Name System DNS tunneling is a significant challenge in security due to its capacity to hide harmful actions within DNS traffic that appears to be normal and legitimate. Traditional detection methods are based on rule-based approaches or signature matching methods that are often...
CVE-2025-52947
CVE-2025-52947 affects Juniper Networks Junos OS on ACX1000/1100/2000/2100/2200/4000/5048/5096, older than 21.2R3-S9. Root cause: improper handling of exceptional conditions in route processing when the L2 circuit’s primary path port IGP goes down while hot-standby is configured, causing FEB0 to ...
Characterizing Security and Privacy Teaching Standards for Schools in the United States
Increasingly, students begin learning aspects of security and privacy during their primary and secondary education grades K-12 in the United States. Individual U.S. states and some national organizations publish teaching standards -- guidance that outlines expectations for what students should...
CVE-2025-49760
External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a network...
CVE-2025-47972
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges over a network...