15951 matches found
Alert! Hackers Exploiting Critical Vulnerability in VMware's Aria Operations Networks
VMware has flagged that a recently patched critical command injection vulnerability in Aria Operations for Networks formerly vRealize Network Insight has come under active exploitation in the wild. The flaw, tracked as CVE-2023-20887, could allow a malicious actor with network access to the produ...
Kubernetes 安全漏洞
Kubernetes K8s is an open source system from the Cloud Native Computing Foundation for automating the deployment, scaling, and management of containerized applications. A security vulnerability exists in Kubernetes kOps that stems from improper privilege management in kOps when running in Gossip...
AlmaLinux 9 : kpatch-patch (ALSA-2023:3705)
The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2023:3705 advisory. - A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation. The perfgroupdetach...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Operations Analytics Predictive Insights (CVE-2023-26283)
Summary Websphere Application Server WAS is shipped as a component of IBM Operations Analytics Predictive Insights. Information about WebSphere Application Server 9.0 vulnerability CVE-2023-26283 to cross-site scripting in the Admin Console has been published. Vulnerability Details Refer to the...
VulnCheck KEV: CVE-2023-20887
VMware Aria Operations for Networks formerly vRealize Network Insight contains a command injection vulnerability that allows a malicious actor with network access to perform an attack resulting in remote code execution...
Power LED Side-Channel Attack
This is a clever new side-channel attack: The first attack uses an Internet-connected surveillance camera to take a high-speed video of the power LED on a smart card reader--or of an attached peripheral device--during cryptographic operations. This technique allowed the researchers to pull a...
The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software, related to errors in the user interface’s information presentation, allows attackers to perform spear-phishing attacks.
The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software is related to errors in information presentation by the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...
USN-6173-1: Linux kernel (OEM) vulnerabilities
Gwangun Jung discovered that the Quick Fair Queueing scheduler implementation in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-31436 It was discovered that the...
ChamelDoH: New Linux Backdoor Utilizing DNS-over-HTTPS Tunneling for Covert CnC
The threat actor known as ChamelGang has been observed using a previously undocumented implant to backdoor Linux systems, marking a new expansion of the threat actor's capabilities. The malware, dubbed ChamelDoH by Stairwell, is a C++-based tool for communicating via DNS-over-HTTPS DoH tunneling...
CVE-2023-21144
In doInBackground of NotificationContentInflater.java, there is a possible temporary denial or service due to long running operations. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
Design/Logic Flaw
In doInBackground of NotificationContentInflater.java, there is a possible temporary denial or service due to long running operations. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
VMware Aria Operations For Networks Web Interface Detection
Binary data vmwareariaoperationsfornetworkswebdetect.nbin...
VMWare Aria Operations for Networks Multiple Vulnerabilities (VMSA-2023-0012)
According to its self-reported version, the instance of VMWare Aria Operations for Networks running on the remote web server is 6.x 6.2.0.1684162127, 6.3.x 6.3.0.1684163738, 6.4.x 6.4.0.1684166601, 6.5.x 6.5.1.1684151627, 6.6.x 6.6.0.1684154516, 6.7.x 6.7.0.1684151941, 6.8.x 6.8.0.1684995353, 6.9...
Cadet Blizzard emerges as a novel and distinct Russian threat actor
As Russia’s invasion of Ukraine continues into its second year and Microsoft continues to collaborate with global partners in response, the exposure of destructive cyber capabilities and information operations provide greater clarity into the tools and techniques used by Russian state-sponsored...
Cadet Blizzard emerges as a novel and distinct Russian threat actor
As Russia’s invasion of Ukraine continues into its second year and Microsoft continues to collaborate with global partners in response, the exposure of destructive cyber capabilities and information operations provide greater clarity into the tools and techniques used by Russian state-sponsored...
Siemens Teamcenter Visualization and JT2Go
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services ...
CVE-2023-20867
A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine...
The vulnerability of the server module gRPC Network Operations Interface (gNOI) in the operating system Juniper Networks Junos OS Evolved allows a attacker to execute arbitrary code.
The vulnerability of the server module gRPC Network Operations Interface gNOI in the Juniper Networks Junos OS Evolved operating system is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2023-12394)
The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12394 advisory. - An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x8664 lacks consistency checks for CR0 and CR4...
VMware Tools 授权问题漏洞
VMware Tools is an enhancement tool that comes with VMware's VMWare virtual machines, and is a driver provided by VMware to enhance the performance of virtual graphics cards and hard disks, as well as to synchronize the clocks of virtual machines with the host computer. A security vulnerability...