Lucene search
+L

691 matches found

Citrix
Citrix
added 2023/08/22 12:0 a.m.18 views

Machine catalog updates failure with error the master VM as an invalid configuration

VMWARE Hypervisor When updating a particular machine catalog with a new master image, the operation fails early on with one of the following: "action name: updatemachinecatalogprovisiningscheme" "action name: MCUpdateMachineCatalog" Error : The master VM as an invalid configuration Same issue...

7.2AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2023/08/03 3:0 p.m.31 views

FAQ: How does Malwarebytes ransomware rollback work?

As the old cybersecurity saying goes: "Its not if, but when." Everyone and their grandma have repeated this foreboding maxim about the nature of ransomware attacks, but sadly, that doesn't make it any less true. Time and again were reminded that ransomware can slip past even the best defenses...

6.7AI score
SaveExploits0
Code423n4
Code423n4
added 2023/07/31 12:0 a.m.12 views

Due to revert found during testing it would be wise to implement a rollback and re-whitelist should it be needed

Lines of code Vulnerability details Impact During testing with the Mainnet fork for the migration testing. We needed to make a distinction between V1 Profiles and V2 profiles within the test code, but this is not so in the standard V2 code, and may cause unforeseen issues after the upgrade. The V...

7AI score
SaveExploits0
Veracode
Veracode
added 2023/06/13 7:40 a.m.41 views

Information Exposure

mediawiki/core is vulnerable to information exposure. The vulnerability exists due to the lack of rollback page error messages masking in the action=rollback operation of the RollbackAction.php page, which allows an attacker to read a username...

4.3CVSS6.4AI score0.00573EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/05/29 9:15 p.m.3 views

CVE-2022-41766

An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. Upon an action=rollback operation, the alreadyrolled message can leak a user name when the user has been revision deleted/suppressed...

4.3CVSS5.7AI score0.00573EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2023/05/29 9:15 p.m.40 views

CVE-2022-41766

An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. Upon an action=rollback operation, the alreadyrolled message can leak a user name when the user has been revision deleted/suppressed...

4.3CVSS5.9AI score0.00573EPSS
SaveExploits1References2
Prion
Prion
added 2023/05/29 9:15 p.m.34 views

Design/Logic Flaw

An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. Upon an action=rollback operation, the alreadyrolled message can leak a user name when the user has been revision deleted/suppressed...

4CVSS4.7AI score0.00573EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2023/05/29 9:15 p.m.3 views

UBUNTU-CVE-2022-41766

An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. Upon an action=rollback operation, the alreadyrolled message can leak a user name when the user has been revision deleted/suppressed...

4.3CVSS5.7AI score0.00573EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/05/29 12:0 a.m.10 views

CVE-2022-41766

An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. Upon an action=rollback operation, the alreadyrolled message can leak a user name when the user has been revision deleted/suppressed...

6.6AI score0.00573EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/05/29 12:0 a.m.5 views

PT-2023-14033 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.35.8 MediaWiki versions 1.36.x through 1.37.4 MediaWiki versions 1.38.x through 1.38.2 Description: An issue was discovered in MediaWiki where the alreadyrolled message can leak a user name upon an action=rollbac...

9.8CVSS5.9AI score0.22699EPSS
SaveExploits27References104
CVE
CVE
added 2023/05/29 12:0 a.m.249 views

CVE-2022-41766

MediaWiki contains a vulnerability (CVE-2022-41766) where, during action=rollback, the alreadyrolled message can leak the username of users who have been revision deleted or suppressed. Affected versions are: before 1.35.8; 1.36.x; and 1.37.x before 1.37.5; and 1.38.x before 1.38.3. Remediation p...

4.3CVSS4.3AI score0.00573EPSS
SaveExploits1References1Affected Software1
Debian CVE
Debian CVE
added 2023/05/29 12:0 a.m.54 views

CVE-2022-41766

An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. Upon an action=rollback operation, the alreadyrolled message can leak a user name when the user has been revision deleted/suppressed...

4.3CVSS4.5AI score0.00573EPSS
SaveExploits1
OSV
OSV
added 2023/05/29 12:0 a.m.33 views

CVE-2022-41766

An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. Upon an action=rollback operation, the alreadyrolled message can leak a user name when the user has been revision deleted/suppressed...

4.3CVSS5AI score0.00573EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 6:14 a.m.4 views

SUSE CVE-2006-5542

backend/tcop/postgres.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service daemon crash related to duration logging of V3-protocol Execute messages for 1 COMMIT and 2 ROLLBACK SQL statements...

4CVSS7.2AI score0.01926EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 3:50 a.m.6 views

SUSE CVE-2021-1043

In TBD of TBD, there is a possible downgrade attack due to under utilized anti-rollback protections. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

5.5CVSS5.6AI score0.00116EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:45 a.m.6 views

SUSE CVE-2021-23839

OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater th...

4.3CVSS6.2AI score0.02961EPSS
SaveExploits0References3
NVD
NVD
added 2023/02/08 9:15 p.m.29 views

CVE-2022-38777

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

7.8CVSS7.6AI score0.00253EPSS
SaveExploits0References2
OSV
OSV
added 2023/02/08 9:15 p.m.8 views

CVE-2022-38777

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

7.8CVSS5.5AI score0.00253EPSS
SaveExploits0References2
Prion
Prion
added 2023/02/08 9:15 p.m.22 views

Design/Logic Flaw

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

4.3CVSS7.5AI score0.00253EPSS
SaveExploits0References2Affected Software2
NVD
NVD
added 2023/01/26 9:15 p.m.29 views

CVE-2022-38775

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

7.8CVSS7.6AI score0.00253EPSS
SaveExploits0References2
Rows per page
Query Builder