15987 matches found
The vulnerability of the kernel of operating systems such as macOS, tvOS, watchOS, iOS, and iPadOS allows attackers to execute arbitrary code.
The vulnerability in the kernels of operating systems such as macOS, tvOS, watchOS, iOS, and iPadOS arises from operations that occur outside of the buffers. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2021-37317
Directory Traversal vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbitrary files via improper sanitation on the target for COPY and MOVE operations...
VMware vRealize Operations 8.6.x < 8.6.4 CSRF (VMSA-2023-0002)
The version of VMware vRealize Operations vROps running on the remote host is 8.6.x prior to 8.6.4. It is, therefore, affected by a CSRF vulnerability. A malicious user could execute actions on the vROps platform on behalf of the authenticated victim user. Note that Nessus has not tested for this...
ASUS RT-AC68U 安全漏洞
ASUS RT-AC68U is a router from Asus China. A security vulnerability exists in ASUS RT-AC68U router firmware versions prior to 3.0.0.4.386.41634, which stems from incorrect access control. An attacker can exploit the vulnerability to write arbitrary files to perform COPY and MOVE operations...
CVE-2022-40268
Improper Restriction of Rendered UI Layers or Frames vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.14.000 to 01.47.000, Mitsubishi Electric Corporation GOT2000 Series GT25 model versions 01.14.000 to 01.47.000 and Mitsubishi Electric Corporation GT...
GHSA-WQXW-8H5G-HQ56 Switcher Client contains Regular Expression Denial of Service (ReDoS)
Impact Unsanitized input flows into Strategy match operation EXIST, where it is used to build a regular expression. This may result in a Regular expression Denial of Service attack reDOS. Patches Patched in 3.1.4 Workarounds Avoid using Strategy settings that use REGEX in conjunction with EXIST a...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : xterm (SUSE-SU-2023:0221-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0221-1 advisory. - CVE-2022-45063: Fixed an arbitrary code execution issue under configurations using vi and zsh bsc120530...
CVE-2023-20856
VMware vRealize Operations vROps contains a CSRF bypass vulnerability. A malicious user could execute actions on the vROps platform on behalf of the authenticated victim user...
CVE-2023-20856
VMware vRealize Operations vROps contains a CSRF bypass vulnerability. A malicious user could execute actions on the vROps platform on behalf of the authenticated victim user...
Design/Logic Flaw
VMware vRealize Operations vROps contains a CSRF bypass vulnerability. A malicious user could execute actions on the vROps platform on behalf of the authenticated victim user...
CVE-2023-20856
VMware vRealize Operations vROps contains a CSRF bypass vulnerability. A malicious user could execute actions on the vROps platform on behalf of the authenticated victim user...
CVE-2023-20856
VMware vRealize Operations vROps contains a CSRF bypass vulnerability. A malicious user could execute actions on the vROps platform on behalf of the authenticated victim user...
Vulnerability fixed in VMware vRealize Operations
A vulnerability has been fixed in VMware vRealize Operations. A malicious person with user privileges within the same network is able to able to bypass Cross-Site Request Forgery CSRF protection. As a result, a malicious party may be able to launch a CSRF attack cross-site request forgery attack ...
VMware Releases Security Update for VMware vRealize Operations
VMware released a security update that addresses a cross-site request forgery bypass vulnerability affecting VMware vRealize Operations. A malicious user could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review VMware Security...
VMware vRealize Operations 跨站请求伪造漏洞
VMware vRealize Operations is an application from VMware, Inc. A unified, AI-based platform for private, hybrid, and multi-cloud environments that delivers IT operations management on autopilot. A security vulnerability exists in VMware vRealize Operations vROps version 8.6.x series, which can be...
Year in Review: Rapid7 Threat Intelligence
In an evolving threat landscape, non-stop alerts and more IOC feeds don’t guarantee better protection. Security teams are overwhelmed and struggle to identify relevant threat information. Thankfully, Threat Command delivers highly contextual alerts and integration across your environment to help...
PT-2023-7460 · Vmware · Vmware Vrealize Operations
Name of the Vulnerable Software and Affected Versions: VMware vRealize Operations vROps affected versions not specified Description: The issue is related to insufficient authentication of executed requests in the vRealize Operations vROps tool, allowing a remote attacker to perform a CSRF attack...
VMSA-2023-0002:VMware vRealize Operations (vROps) update addresses a CSRF bypass vulnerability
Advisory ID: VMSA-2023-0002 CVSSv3 Range: 6.5 Issue Date:2023-01-31 Updated On: 2023-01-31 Initial Advisory CVEs: CVE-2023-20856 Synopsis: VMware vRealize Operations vROps update addresses a CSRF bypass vulnerability CVE-2023-20856 RSS Feed Download PDF Download Text File Share this page on socia...
Fedora 37 : rust-bat / rust-cargo-c / rust-exa / rust-git-delta / rust-gitui / etc (2023-e3c8abd37e)
The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-e3c8abd37e advisory. This update contains rebuilds of all Rust applications against versions of the libgit2-sys crate that ship fixes for CVE-2022-24765 and CVE-2022-291...
Ubuntu: Security Advisory (USN-5253-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...