Lucene search
+L

571 matches found

Kaspersky
Kaspersky
added 2021/04/13 12:0 a.m.74 views

KLA12139 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of...

9.8CVSS9.8AI score0.62088EPSS
SaveExploits4References104
Tenable Nessus
Tenable Nessus
added 2021/04/13 12:0 a.m.67 views

KB5001339: Windows 10 version 1803 Security Update (April 2021)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072, CVE-2021-28310 - Windows Media Photo Codec Information Disclosure Vulnerability CVE-2021-27079 - Windows Event Tracing Elevati...

9.8CVSS7.3AI score0.62088EPSS
SaveExploits3References71
Positive Technologies
Positive Technologies
added 2021/04/13 12:0 a.m.6 views

PT-2021-2717 · Microsoft · Windows Resource Manager Psm Service Extension +1

Name of the Vulnerable Software and Affected Versions: Windows Resource Manager PSM Service Extension affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the implementation of the Resource Manager PSM Service Extension. This vulnerabilit...

7.8CVSS7.2AI score0.0055EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/04/13 12:0 a.m.6 views

Windows Resource Manager 权限许可和访问控制问题漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the Explorer PSM Service Extension in...

7.8CVSS5.7AI score0.0055EPSS
SaveExploits0References5
CNVD
CNVD
added 2021/04/13 12:0 a.m.13 views

Dell SRM and SMR Code Issue Vulnerabilities

Dell EMC Storage Resource Manager is an application from Dell, Inc. A comprehensive monitoring and reporting solution that helps IT visualize, analyze and optimize today's storage infrastructure while providing a management framework to support software-defined storage investments. A code issue...

10CVSS7.4AI score0.03242EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/04/12 12:0 a.m.8 views

Dell EMC Storage Resource Manager 代码问题漏洞

Dell EMC Storage Resource Manager is an application from Dell, Inc. A comprehensive monitoring and reporting solution that helps IT visualize, analyze and optimize today's storage infrastructure while providing a management framework to support software-defined storage investments. A code issue...

10CVSS6.3AI score0.03242EPSS
SaveExploits0References2
Snyk
Snyk
added 2021/04/09 11:19 a.m.5 views

Information Exposure

Overview foremanazurerm is a This gem provides Azure Resource Manager as a compute resource for The Foreman Affected versions of this package are vulnerable to Information Exposure. A credential leak was identified which will expose Azure Resource Manager's secret key through JSON of the API...

8.1CVSS6.8AI score0.0065EPSS
SaveExploits0References2
NVD
NVD
added 2021/04/08 11:15 p.m.20 views

CVE-2021-3413

A flaw was found in Red Hat Satellite in tfm-rubygem-foremanazurerm in versions before 2.2.0. A credential leak was identified which will expose Azure Resource Manager's secret key through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity ...

6.5CVSS0.0065EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/08 11:15 p.m.22 views

CVE-2021-3413

A flaw was found in Red Hat Satellite in tfm-rubygem-foremanazurerm in versions before 2.2.0. A credential leak was identified which will expose Azure Resource Manager's secret key through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity ...

6.3CVSS6.5AI score
SaveExploits0References1
Prion
Prion
added 2021/04/08 11:15 p.m.20 views

Design/Logic Flaw

A flaw was found in Red Hat Satellite in tfm-rubygem-foremanazurerm in versions before 2.2.0. A credential leak was identified which will expose Azure Resource Manager's secret key through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity ...

6.5CVSS6.4AI score0.0065EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2021/04/08 10:6 p.m.23 views

CVE-2021-3413

A flaw was found in Red Hat Satellite in tfm-rubygem-foremanazurerm in versions before 2.2.0. A credential leak was identified which will expose Azure Resource Manager's secret key through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity ...

6.7AI score0.0065EPSS
SaveExploits0References1
CVE
CVE
added 2021/04/08 10:6 p.m.132 views

CVE-2021-3413

CVE-2021-3413 affects Red Hat Satellite’s tfm-rubygem-foreman_azure_rm: versions before 2.2.0 expose the Azure Resource Manager secret key via API output JSON, leading to potential information disclosure. Root cause: credential leakage in the API surface. Impact per sources: data confidentiality ...

6.5CVSS6.3AI score0.0065EPSS
SaveExploits0References1Affected Software1
AlmaLinux
AlmaLinux
added 2021/04/06 1:32 p.m.27 views

pacemaker bug fix and enhancement update

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Bug Fixes and Enhancements: pacemaker never promotes a bundle until another transition unblocks it BZ1935240 pacemaker generate...

2.5AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.11 views

The vulnerability of the SLURM resource manager involves bypassing authentication by using an alternative path or channel. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SLURM resource manager relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

8.1CVSS7.4AI score0.02257EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.15 views

The vulnerability of the SLURM resource manager, related to the insecure storage of confidential information, allows a perpetrator to gain access to confidential data.

The vulnerability of the SLURM resource manager is related to the insecure storage of confidential information. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

4.3CVSS6.7AI score0.00824EPSS
SaveExploits0References5Affected Software2
Microsoft Malware Protection
Microsoft Malware Protection
added 2021/03/09 5:0 p.m.28 views

Azure LoLBins: Protecting against the dual use of virtual machine extensions

Azure Defender for Resource Manager offers unique protection by automatically monitoring the resource management operations in your organization, whether theyre performed through the Azure portal, Azure REST APIs, Azure CLI, or other Azure programmatic clients. In this blog, we will look into the...

8AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
added 2021/03/09 5:0 p.m.24 views

Azure LoLBins: Protecting against the dual use of virtual machine extensions

Azure Defender for Resource Manager offers unique protection by automatically monitoring the resource management operations in your organization, whether theyre performed through the Azure portal, Azure REST APIs, Azure CLI, or other Azure programmatic clients. In this blog, we will look into the...

8AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2021/03/09 2:25 p.m.7 views

CVE-2021-3417

An internal product security audit of LXCO, prior to version 1.2.2, discovered that credentials for Lenovo XClarity Administrator LXCA, if added as a Resource Manager, are encoded then written to an internal LXCO log file each time a session is established with LXCA. Affected logs are captured in...

4.9CVSS5.8AI score0.00542EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/02/19 12:0 a.m.16 views

Red Hat Satellite 6 Information Disclosure Vulnerability

Red Hat Satellite is a system management platform from Red Hat. The platform can be used to extend Linux infrastructures and provide system management functions such as administration, configuration, and monitoring. An information disclosure vulnerability exists in Red Hat Satellite. The...

6.5CVSS6.7AI score0.0065EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2021/02/18 6:37 p.m.33 views

CVE-2021-3413

A flaw was found in Red Hat Satellite. A credential leak was identified which will expose Azure Resource Manager's secret key through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

6.5CVSS1.6AI score0.0065EPSS
SaveExploits0References3
Rows per page
Query Builder