13545 matches found
Fedora 37 : community-mysql (2023-af03a123b5)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-af03a123b5 advisory. MySQL 8.0.33 Changelog: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-33.html Tenable has extracted the preceding description block directly from...
Security Updates for Microsoft SharePoint Server Subscription Edition (May 2023)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A Sharepoint Server spoofing vulnerability. CVE-2023-24950 - A Sharepoint Server information disclosure vulnerability...
May 9, 2023—KB5026426 (Security-only update)
None None...
May 9, 2023—KB5026408 (Monthly Rollup)
None None...
Internet Explorer help
None None...
May 9, 2023—KB5026427 (Security-only update)
None None...
May 9, 2023—KB5026361 (OS Builds 19042.2965, 19044.2965, and 19045.2965) - EXPIRED
None None...
May 9, 2023—KB5026413 (Monthly Rollup)
None None...
Stable Channel Update for ChromeOS / ChromeOS Flex
The Stable channel is being updated to 15393.48.0 Platform version: 113.0.5672.114 for most ChromeOS devices and will be rolled out over the next few days. This build contains a number of bug fixes and security updates. If you find new issues, please let us know one of the following ways: File a...
Siemens SICAM P850 and P855 Devices Session Fixation (CVE-2022-40226)
A vulnerability has been identified in SICAM P850 All versions V3.10, SICAM P855 All versions V3.10. Affected devices accept user defined session cookies and do not renew the session cookie after login/logout. This could allow an attacker to take over another user's session after login. This plug...
ALSA-2023:2319 Moderate: git security and bug fix update
Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to wo...
PT-2023-2722 · Microsoft · Sharepoint Server +4
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft SharePoint affected versions not specified Microsoft Office Online...
KLA49155 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, spoof user interface, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote...
Cross site scripting
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 16.4, iOS 16.4 and iPadOS 16.4. Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory...
Elastic Kibana 8.7.0 Arbitrary Code Execution Vulnerability (ESA-2023-08)
Kibana is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:kibana";...
Moderate: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.5.8 security updates and bug fixes
Red Hat Advanced Cluster Management for Kubernetes 2.5.8 General Availability release images, which fix bugs and security updates container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which...
Moderate: Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.0.8 security updates and bug fixes
Multicluster Engine for Kubernetes 2.0.8 General Availability release images, which fix bugs and security updates container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
Advanced Host Monitor 12.56 Unquoted Service Path
Exploit Title: Advanced Host Monitor v12.56 - Unquoted Service Path Date: 2023-04-23 CVE: CVE-2023-2417 Exploit Author: MrEmpy Vendor Homepage: https://www.ks-soft.net Software Link: https://www.ks-soft.net/hostmon.eng/downpage.htm Version: 12.56 Tested on: Windows 10 21H2 Title: ================...
Advanced Host Monitor v12.56 - Unquoted Service Path Vulnerability
Exploit Title: Advanced Host Monitor v12.56 - Unquoted Service Path CVE: CVE-2023-2417 Exploit Author: MrEmpy Vendor Homepage: https://www.ks-soft.net Software Link: https://www.ks-soft.net/hostmon.eng/downpage.htm Version: 12.56 Tested on: Windows 10 21H2 Title: ================ Advanced Host...
Vulnerabilities fixed in IBM MQ
IBM has fixed vulnerabilities in MQ. A malicious party could exploit the exploit the vulnerabilities to cause a Denial-of-Service, or to gain access to sensitive data. To access sensitive data, the malicious party must have access to a client where the Trace feature is enabled. IBM has released...