CVE-2023-24900

Windows NTLM Security Support Provider Information Disclosure Vulnerability...

Information disclosure

Windows NTLM Security Support Provider Information Disclosure Vulnerability...

CVE-2023-24900

CVE-2023-24900 corresponds to a Windows NTLM Security Support Provider Information Disclosure Vulnerability. The provided documents confirm the vulnerability title and CVSS 3.1 base metrics (5.9, MEDIUM) with Network attack vector and no user interaction, but do not supply detailed root-cause des...

CVE-2023-24900 Windows NTLM Security Support Provider Information Disclosure Vulnerability

...

Windows NTLM Security Support Provider Information Disclosure Vulnerability

...

PT-2023-2692 · Microsoft · Windows Ntlm Security Support Provider +1

Name of the Vulnerable Software and Affected Versions: Windows NTLM Security Support Provider affected versions not specified Description: The issue is related to the implementation of the NTLM Security Support Provider protocol in the Windows operating system, which lacks protection for service...

Microsoft Windows OLE 安全漏洞

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation USA that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft Windows OLE. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

Fedora: Security Advisory for rust-afterburn (FEDORA-2023-cc21019773)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: nmstate-2.2.10-4.fc38

Nmstate is a library with an accompanying command line tool that manages host networking settings in a declarative manner and aimed to satisfy enterprise needs to manage host networking through a northbound declarative API and multi provider support on the southbound...

[SECURITY] Fedora 38 Update: rust-afterburn-5.4.0-3.fc38

Simple cloud provider agent...

Service Provider Management System Cross-Site Scripting Vulnerability (CNVD-2023-38191)

Service Provider Management System is a web-based application by Carlo Montero, an individual developer. It is designed to provide dynamic websites for service provider companies. A cross-site scripting vulnerability exists in Service Provider Management System version 1.0, which can be exploited...

Service Provider Management System Authorization Issues Vulnerability

Service Provider Management System is a web-based application by Carlo Montero, an individual developer. It is designed to provide dynamic websites for service provider companies. An authorization issue vulnerability exists in Service Provider Management System version 1.0, which can be exploited...

Service Provider Management System SQL Injection Vulnerability

Service Provider Management System is a web-based application by Carlo Montero, an individual developer. It is designed to provide dynamic websites for service provider companies. A SQL injection vulnerability exists in Service Provider Management System version 1.0, which is caused by an incorre...

Service Provider Management System SQL Injection Vulnerability (CNVD-2023-38189)

Service Provider Management System is a web-based application by Carlo Montero, an individual developer. It is designed to provide dynamic websites for service provider companies. A SQL injection vulnerability exists in Service Provider Management System version 1.0, which can be exploited by...

Service Provider Management System SQL Injection Vulnerability (CNVD-2023-38192)

Service Provider Management System is a web-based application by Carlo Montero, an individual developer. It is designed to provide dynamic websites for service provider companies. A SQL injection vulnerability exists in Service Provider Management System version 1.0, which can be exploited by...

Service Provider Management System SQL Injection Vulnerability (CNVD-2023-38190)

Service Provider Management System is a web-based application by Carlo Montero, an individual developer. It is designed to provide dynamic websites for service provider companies. A SQL injection vulnerability exists in Service Provider Management System version 1.0, which can be exploited by...

SUSE-SU-2023:2100-1 Security update for terraform-provider-helm

This update for terraform-provider-helm fixes the following issues: Updated terraform-provider-helm to version 2.9.0: - CVE-2023-25165: Fixed getHostByName Function Information Disclosure by updating embedded helm package bsc1208086...

SQL injection in the delete action of the file add_edit_event.php

Description We have discovered that the SQL injection vulnerability can be exploited through the file /interface/main/calendar/addeditevent.php, allowing an attacker to manipulate the query via the eid parameter provided that Support Multi-Provider Events feature must be enabled. Proof of Concept...

Internet Bug Bounty: CVE-2023-28710 Apache Airflow Spark Provider Arbitrary File Read via JDBC

A vulnerability was discovered in Apache Airflow Spark Provider before version 4.0.1. The vulnerability allowed an attacker to read arbitrary files on the system by passing malicious schema parameters during the connection establishment process. This could be exploited by connecting to a maliciou...

CVE-2023-2350

A vulnerability classified as problematic was found in SourceCodester Service Provider Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched...