7968 matches found
CVE-2023-29372
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2023-29367
iSCSI Target WMI Provider Remote Code Execution Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Remote code execution
iSCSI Target WMI Provider Remote Code Execution Vulnerability...
Siemens Mendix SAML Authentication Bypass Vulnerability
The Mendix SAML module allows you to authenticate users in cloud applications using SAML. The module can communicate with any identity provider that supports SAML 2.0 or Shibboleth. An authentication bypass vulnerability exists in Siemens Mendix SAML, which can be exploited by an attacker to bypa...
CVE-2023-29372 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
CVE-2023-29372 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
CVE-2023-29367 iSCSI Target WMI Provider Remote Code Execution Vulnerability
...
CVE-2023-29367
Technical details for CVE-2023-29367 are not publicly provided in the connected documents you supplied. Monitor for updates.
CVE-2023-29367 iSCSI Target WMI Provider Remote Code Execution Vulnerability
...
Beware: New DoubleFinger Loader Targets Cryptocurrency Wallets with Stealer
A novel multi-stage loader called DoubleFinger has been observed delivering a cryptocurrency stealer dubbed GreetingGhoul in what's an advanced attack targeting users in Europe, the U.S., and Latin America. "DoubleFinger is deployed on the target machine, when the victim opens a malicious PIF...
iSCSI Target WMI Provider Remote Code Execution Vulnerability
...
Cross-site Scripting (XSS)
github.com/rancher/rancher is vulnerable to Cross-site Scripting XSS. The vulnerability exists in the Projects/Namespaces and Auth Provider sections, which allows an attacker with write access to inject and execute malicious code and steal sensitive information, manipulate web content, or perform...
Microsoft iSCSI Target WMI Provider 安全漏洞
Microsoft iSCSI Target WMI Provider is an application from Microsoft Corporation USA. A security vulnerability exists in Microsoft iSCSI Target WMI Provider. An attacker can exploit this vulnerability to remotely execute code. The following products and editions are affected:Windows Server 2022...
Microsoft OLE DB Provider for SQL Server 安全漏洞
Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft OLE DB Provider for SQL Server. An attacker could exploit the vulnerability to remotely execute code. T...
KB5027230: Windows 10 LTS 1507 Security Update (June 2023)
The remote Windows host is missing security update 5027230. It is, therefore, affected by multiple vulnerabilities - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability CVE-2023-29363, CVE-2023-32014, CVE-2023-32015 - Microsoft ODBC Driver Remote Code Execution Vulnerabili...
Improper Authentication
Overview doorkeeper is an OAuth 2 provider for Rails and Grape. Affected versions of this package are vulnerable to Improper Authentication due to automatically processing authorization requests without user consent for public clients that have been previously approved. Public clients are...
CVE-2023-34246 Doorkeeper Improper Authentication vulnerability
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable to impersonation, their identity cannot...
CVE-2023-34246
CVE-2023-34246 affects ruby-doorkeeper, an OAuth 2 provider for Ruby on Rails and Grape. Prior to Doorkeeper 5.6.6, the gem could automatically process authorization requests for public clients that had been previously approved, enabling potential impersonation of public clients due to identity n...