451 matches found
PT-2023-3677
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the init cea offsets function in the /arch/x86/mm/cpu entry area.c module of the Linux kernel's memory management subsystem. It concerns the accessibility of the...
PT-2023-22127 · Marksoft · Marksoft
Name of the Vulnerable Software and Affected Versions: Marksoft versions through Mobile:v.7.1.7 Marksoft version Login:1.4 Marksoft version API:20230605 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command...
IBM Security Verify Access Input Validation Error Vulnerability (CNVD-2023-41894)
IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. IBM Security Verify Access suffers from an input validation error vulnerability that stems from improper input validation of the application, which can be exploited by an...
UNISOC Chipsets 安全漏洞
UNISOC Chipsets is a chipset from China's Ziguang Zhanrui UNISOC. A security vulnerability exists in the UNISOC Chipsets modem module, which stems from a lack of validation in LTE for NAS secure mode command replay attacks...
Simplify Access Security: Integrate ZTNA with Your Cloud Identity Solution
...
PT-2023-14630 · Unknown · Livebox Collaboration Vdesk
Name of the Vulnerable Software and Affected Versions: LIVEBOX Collaboration vDesk versions through v018 Description: An issue allows an Insecure Direct Object Reference to occur under the "5.6.5-3/doc/ID-FILE/c/N/C/websocket" endpoint. A malicious unauthenticated user can access cached files in...
CVE-2023-26063
Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type...
Fortinet FortiNAC 安全漏洞
Fortinet FortiNAC is a set of network access control solutions from the U.S. company Fita Fortinet. The product is primarily used for network access control and IoT security. A security vulnerability exists in Fortinet FortiNAC that stems from improper privilege management...
K4616: BSD telnet environment vulnerability CAN-2005-0488
Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...
CVE-2022-30339
Out-of-bounds read in firmware for the IntelR Integrated Sensor Solution before versions 5.4.2.4579v3, 5.4.1.4479 and 5.0.0.4143 may allow a privileged user to potentially enable denial of service via local access...
AMI MegaRAC SP-X BMC Redfish Vulnerabilities - Lenovo Support US
No description provided...
SA44399 - 2020-03: Out-of-Cycle Advisory: Pulse Secure recommendations for Enterprise VPN Security (AA20-073A)
Last Modified Date 2026-Aug-24 00:35:10...
How to Use Cloud Access Security Brokers for Data Protection
By Owais Sultan A cloud access security broker is a security policy enforcement point that can be located on-premises or in… This is a post from HackRead.com Read the original post: How to Use Cloud Access Security Brokers for Data Protection...
CVE-2021-36503
SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat parameter to /list.php file...
CVE-2022-4236 Welcart e-Commerce < 2.8.5 - Subscriber+ Arbitrary File Access
The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content of a file via an AJAX action available to any authenticated users, which could allow users with a role as low as subscriber to read arbitrary files on the server...
CVE-2021-34568 WAGO I/O-Check Service prone to Allocation of Resources Without Limits or Throttling
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service...
CVE-2022-3066
An issue has been discovered in GitLab affecting all versions starting from 10.0 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. It was possible for an unauthorised user to create issues in a project...
CSO perspective: Why a strong IAM strategy is key to an organization’s cybersecurity approach
The security community is continuously changing, growing, and learning from each other to better position the world against cyberthreats. In the latest post of our Community Voices blog series, Microsoft Security Senior Product Marketing Manager Brooke Lynn Weenig talks with Alissa “Dr. Jay”...
CSO perspective: Why a strong IAM strategy is key to an organization’s cybersecurity approach
The security community is continuously changing, growing, and learning from each other to better position the world against cyberthreats. In the latest post of our Community Voices blog series, Microsoft Security Senior Product Marketing Manager Brooke Lynn Weenig talks with Alissa “Dr. Jay”...
CVE-2022-40713
An issue was discovered in NOKIA 1350OMS R14.2. Multiple Relative Path Traversal issues exist in different specific endpoints via the file parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily...