CVE-2023-45619

There is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI Aruba's access point management protocol. Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to...

PT-2023-6059 · Microsoft · Windows Power Management Service +1

Name of the Vulnerable Software and Affected Versions: Windows Power Management Service affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows Power Management Service, which can be exploited to disclose protected information. Thi...

PT-2023-6043 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system kernel, allowing an attacker to potentially elevate their privileges. This could affect the system, but...

PT-2023-4374 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system kernel, which can be exploited to elevate privileges. This allows an attacker to affect the system...

PT-2023-5570 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system kernel, which can be exploited to elevate privileges. This allows an attacker to affect the system...

PT-2023-3844 · Microsoft · Windows Failover Cluster +1

Name of the Vulnerable Software and Affected Versions: Windows Failover Cluster affected versions not specified Description: The issue is related to information disclosure in the Failover Cluster component of Windows operating systems. It allows a remote attacker to gain unauthorized access to...

KLA50475 OSI vulnerability in Apache Tomcat

An information disclosure vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories Fixed in Apache Tomcat 9.0.75 Related products Apache-Tomcat CVE list CVE-2023-34981 critical Solution Update to the latest versi...

kernel: HID: mcp2221: prevent a buffer overflow in mcp_smbus_write()

A buffer overflow vulnerability has been found in the linux kernel, such that when calling mcpsmbuswrite, a buffer of a smaller size is called when performing memcpy, resulting in damage to confidentiality, integrity, and availability of the system...

PT-2023-2462 · Microsoft · Windows Error Reporting Service +1

Name of the Vulnerable Software and Affected Versions: Windows Error Reporting Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Error Reporting Service, which can be exploited to elevate privileges. This allows an attacke...

PT-2023-2303 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in Windows DNS Server, allowing remote attackers to execute arbitrary code and affect the system...

PT-2023-1766 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows Accounts Picture component, allowing an attacker to elevate their privileges. This can affect the system. Recommendation...

RewardThrottle.setTimekeeper: If changing the timekeeper causes the epoch to change, it will mess up the system

Lines of code Vulnerability details Impact RewardThrottle.setTimekeeper allows POOLUPDATERROLE to update the timekeeper when RewardThrottle is active, function setTimekeeperaddress timekeeper external onlyRoleMaltPOOLUPDATERROLE, "Must have pool updater privs" requiretimekeeper != address0, "Not...

SUSE CVE-2022-35978

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

PT-2023-1593 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is caused by a buffer overflow in memory, allowing an attacker to elevate their privileges. This can affect the system, potentially enabling...

Microsoft Client Server Run-time Subsystem (CSRSS) 安全漏洞

Microsoft Client Server Run-time Subsystem is a client/server run-time subsystem from Microsoft Corporation of the United States, manifested as the csrss.exe process. It is a component of the Windows NT operating system family, appearing in Windows NT 3.1 and later systems, providing the user mod...

PT-2022-5732 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insecure privilege management in the Windows Hyper-V hardware virtualization system, which can be exploited to elevate privileges. This could allow an attack...

Kepware KEPServerEX 缓冲区错误漏洞

Kepware Kepserverex is a software application from Kepware USA that communicates with a wide range of industrial equipment. The software supports more than 150 communication protocols and supports the delivery of reliable real-time data to organizations through a single platform. A buffer error...

DEBIAN-CVE-2022-35978

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

PT-2022-3212 · Microsoft · Windows Lsa +1

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority Subsystem Service LSASS affected versions not specified Description: The issue is related to insufficient access control in the Local Security Authority Subsystem Service LSASS of Windows operating systems. It...

PT-2022-2819 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows operating system. It allows a remote attacker to potentially elevate their privileges. The...