GnuTLS Security Vulnerabilities

GnuTLS is a free secure communications library for implementing the SSL, TLS and DTLS protocols. A security vulnerability exists in GnuTLS, which stems from a difference in response time for ciphertexts that are formatted incorrectly versus ciphertexts that are correctly padded, which could allow...

The vulnerability in the implementation of the Kerberos protocol for Windows operating systems allows a perpetrator to circumvent security restrictions.

The vulnerability of the Kerberos protocol for Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

PT-2024-1168 · Korenix · Korenix Jetnet

Name of the Vulnerable Software and Affected Versions: Korenix JetNet devices versions prior to 2024/01 Description: The issue is related to an Improper Authentication vulnerability in the TFTP Server component of Korenix JetNet devices. This vulnerability can be exploited by a remote attacker to...

The vulnerability of the httpd-demon software of D-Link G416 router microprogramming system allows a hacker to bypass security restrictions.

The vulnerability of the httpd-daemon of D-Link G416 microprogrammed router software is related to the absence of authentication for a critical function. Exploiting this vulnerability allows an attacker to bypass security restrictions remotely...

PT-2023-7751 · Microsoft · Azure Devops Server

Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. Exploitation of this issue may allow a remote attacker to bypass security restrictions...

The vulnerability of the Adobe Framemaker desktop publishing system, related to the ability to bypass security functions, allows attackers to circumvent existing security restrictions.

The vulnerability of the desktop publishing system Adobe Framemaker relates to the bypassing of security functions. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

HPESBNS04567 rev.1 - HPE NonStop OSS Network Utilities, Multiple Vulnerabilities

Potential Security Impact: Remote: Bypass Security Restrictions, Indirect Vulnerabilities, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. OSS Network Utilities T1204 - Prior to T1204L01^AAI CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

Vulnerability of microprogrammed programmable logic controllers MELSEC-F: related to authentication breaches, allowing attackers to circumvent existing security restrictions

The vulnerability of MELSEC-F programmable logic controllers’ microprogramming software is related to authentication breaches. Exploiting this vulnerability allows an attacker, operating remotely, to circumvent existing security restrictions...

The vulnerability of the httpd component’s debug credentials in the microprogramming-based industrial Wi-Fi routers Yifan YF325, due to security flaws in the authentication process, allows attackers to bypass the authentication mechanism.

The vulnerability of the httpd component’s debug credentials in the microprogramming-based industrial Wi-Fi routers Yifan YF325 is related to security flaws in the system. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process remotely...

The vulnerability of Google Chrome’s Intents function allows attackers to circumvent existing access restrictions.

The vulnerability of Google Chrome’s Intents function is related to improper security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions remotely...

The vulnerability of the MoTw mechanism in Windows operating systems allows attackers to circumvent security restrictions.

The vulnerability of the MoTe-Web mechanism in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

The vulnerability of the Search component of the Windows operating system, which allows a hacker to bypass security restrictions

The vulnerability of the WordPad text editor on the Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions from a remote location...

The vulnerability of the RequestHandlers.js LoginAuth function in the software for router configuration by MilesightVPN allows a hacker to bypass the authentication process.

The vulnerability of the RequestHandlers.js LoginAuth function in the MilesightVPN software’s router configuration relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to bypass the authentication process remotely...

The vulnerability of Cisco IOS XR operating system’s MPLS interfaces allows attackers to circumvent security restrictions.

The vulnerability of Cisco IOS XR operating system’s MPLS interfaces is related to deficiencies in access control based on Access Control Lists ACLs. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

The vulnerability of the doRTAAccessCTConfig method in the software for testing and monitoring network quality by Visualware MyConnection Server allows a hacker to circumvent existing security restrictions.

The vulnerability of the doRTAAccessCTConfig method exists in the software used for testing and monitoring network quality by Visualware MyConnection Server. This vulnerability arises due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a...

USN-6352-1 shiro vulnerabilities

It was discovered that Apache Shiro incorrectly handled certain HTTP requests. A remote attacker could possibly use this issue to bypass security restrictions. CVE-2020-13933, CVE-2020-17510...

Broadcom Brocade SANnav 安全漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom Corporation USA. A security vulnerability exists in Brocade SANnav versions prior to v2.3.0 and v2.2.2a, which originated in the Brocade SANnav web interface that allows unauthenticated remote users to bypass web...

The vulnerability of the module module.constructor.createRequire() in the Node.js software platform allows a hacker to circumvent established security restrictions.

The vulnerability of the module module.constructor.createRequire in the Node.js software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to circumvent established security restrictions remotely...

The vulnerability of the email module in the Python programming language interpreter allows attackers to bypass the security measures.

The vulnerability of the email module in the Python programming language interpreter is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to bypass security measures remotely...

CVE-2023-41100

An issue was discovered in the hcaptcha aka hCaptcha for EXT:form extension before 2.1.2 for TYPO3. It fails to check that the required captcha field is submitted in the form data. allowing a remote user to bypass the CAPTCHA check...