PT-2024-2726 · Mysql Server +8 · Mysql Server +8

Name of the Vulnerable Software and Affected Versions: OpenSSL versions prior to the fixed version MySQL Server versions 8.0.36 and earlier, 8.3.0 and earlier Description: The POLY1305 MAC implementation in OpenSSL contains a bug that might corrupt the internal state of applications running on...

CVE-2023-22522

This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject unsafe user input into a Confluence page. Using this approach, an attacker is able to achieve Remote Code Execution RCE on an affected instance. Publicly accessible Confluence Da...

CVE-2023-22522

This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject unsafe user input into a Confluence page. Using this approach, an attacker is able to achieve Remote Code Execution RCE on an affected instance. Publicly accessible Confluence Da...

M-Files Security Vulnerability

M-Files is an innovative metadata-driven document management platform from M-Files, Inc. A security vulnerability exists in M-Files server versions prior to 23.11.13156.0, which stems from a lack of access rights checking and allows an attacker to perform data writes and exports using the M-Files...

Nextcloud Security Breach

Nextcloud is an open source, self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud Server, Nextcloud Enterprise Server versions prior to 25.0.11, 26.0.6, and 27.1.0, which originates from an...

Nextcloud Security Breach

Nextcloud is an open source, self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud Server, Nextcloud Enterprise Server versions prior to 25.0.11, 26.0.6, and 27.1.0, which stems from a userldap...

PT-2023-8883 · Nextcloud +2 · Nextcloud Server +3

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions 25.0.0 through 25.0.10 Nextcloud Server versions 26.0.0 through 26.0.5 Nextcloud Server versions 27.0.0 through 27.0.0 Nextcloud Enterprise Server versions 22.0.0 through 22.2.10.15 Nextcloud Enterprise Server versio...

Microsoft Windows Speech Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Speech. An attacker could exploit this vulnerability to gain elevated privileges. The following products and...

Elasticsearch Security Vulnerabilities

Elasticsearch is a search engine based on the Lucene library. A security vulnerability exists in Elasticsearch that stems from a secret token configuration that is not applied when combining some versions of ECK with APM Server...

Microsoft Windows TPM Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows TPM. An attacker has exploited the vulnerability to cause a denial of service on the system. The following products and versions are...

Microsoft Message Queuing Security Vulnerability

Microsoft Message Queuing is a solution for implementing asynchronous and synchronous scenarios that require high performance. A security vulnerability exists in Microsoft Message Queuing. An attacker could exploit this vulnerability to remotely execute code. The following products and editions a...

Microsoft Message Queuing Security Vulnerability

Microsoft Message Queuing is a solution for implementing asynchronous and synchronous scenarios that require high performance. A security vulnerability exists in Microsoft Message Queuing. An attacker could exploit this vulnerability to remotely execute code. The following products and versions a...

Microsoft Windows TCP/IP Security Vulnerability

The Microsoft Windows TCP/IP component is a component of Microsoft Corporation USA that provides TCP/IP configuration capabilities for Windows. A security vulnerability exists in Microsoft Windows TCP/IP. An attacker exploiting this vulnerability could gain access to sensitive information. The...

Microsoft Windows Codecs Library Security Vulnerability

The Microsoft Windows Codecs Library is a library of features for the Microsoft Windows system from Microsoft Corporation. A security vulnerability exists in the Microsoft Windows Codecs Library. An attacker can exploit this vulnerability to remotely execute code. The following products and...

Microsoft Visual Studio and Microsoft .NET Security Vulnerabilities

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...

Microsoft Windows TCP/IP Security Vulnerability

The Microsoft Windows TCP/IP component is a component of Microsoft Corporation USA that provides TCP/IP configuration capabilities for Windows. A security vulnerability exists in Microsoft Windows TCP/IP. An attacker exploiting this vulnerability could gain access to sensitive information. The...

UBUNTU-CVE-2023-1409

If the MongoDB Server running on Windows or macOS is configured to use TLS with a specific set of configuration options that are already known to work securely in other platforms e.g. Linux, it is possible that client certificate validation may not be in effect, potentially allowing client to...

CVE-2023-39952

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prior to versions 22.2.10.13, 23.0.12.8, 24.0.12.4, 25.0.8, 26.0.3, and 27.0.1, a user can access files inside a subfolder of a groupfolder accessible to them, even if advanced...

Microsoft Windows Kernel Security Vulnerability

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker could exploit this vulnerability to gain elevated privileges. The following products and versions are affected:Windows 10...

Microsoft Windows Bluetooth A2DP driver security vulnerability

Microsoft Windows is a suite of operating systems for personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in the Microsoft Windows Bluetooth A2DP driver. An attacker could exploit the vulnerability to elevate privileges. The following products and versions...