10204 matches found
CVE-2020-8976
The integrated server of the ZGR TPS200 NG on its 2.00 firmware version and 1.01 hardware version, allows a remote attacker to perform actions with the permissions of a victim user. For this to happen, the victim user has to have an active session and triggers the malicious request...
CVE-2020-8976
CVE-2020-8976 affects ZGR TPS200 NG (firmware 2.00, hardware 1.01). The vulnerability allows a remote attacker to perform actions with the victim user’s permissions when the victim has an active session and triggers a malicious request (CSRF). Documented impacts include high/critical Confidential...
CVE-2020-8976 ZGR TPS200 Cross-Site Request Forgery (CSRF)
The integrated server of the ZGR TPS200 NG on its 2.00 firmware version and 1.01 hardware version, allows a remote attacker to perform actions with the permissions of a victim user. For this to happen, the victim user has to have an active session and triggers the malicious request...
PT-2022-9069 · Unknown · Zgr Tps200 Ng
Name of the Vulnerable Software and Affected Versions: ZGR TPS200 NG version 2.00 Description: The issue allows a remote attacker to perform actions with the permissions of a victim user, given that the victim has an active session and triggers a malicious request. Recommendations: For ZGR TPS200...
PoC Exploit Released for Critical Fortinet Auth Bypass Bug Under Active Attacks
A proof-of-concept PoC exploit code has been made available for the recently disclosed critical security flaw affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager, making it imperative that users move quickly to apply the patches. "FortiOS exposes a management web portal that allows a...
Microsoft Windows Active Directory Certificate Service Security Feature Bypass Vulnerability
Microsoft Windows Active Directory is a centralized directory management service from Microsoft Corporation USA that is responsible for architecting large network environments. Microsoft Windows Active Directory is vulnerable to a certificate service security feature bypass. No details of the...
Microsoft Windows Active Directory Domain Name Service Elevation of Privilege Vulnerability
Microsoft Windows Active Directory is a centralized directory management service from Microsoft Corporation USA that is responsible for architecting large network environments. Microsoft Windows Active Directory has a domain name service elevation of privilege vulnerability, which stems from...
Microsoft Patch Tuesday Fixes New Windows Zero-Day; No Patch for Exchange Server Bugs
Microsoft's Patch Tuesday update for the month of October has addressed a total of 85 security vulnerabilities, including fixes for an actively exploited zero-day flaw in the wild. Of the 85 bugs, 15 are rated Critical, 69 are rated Important, and one is rated Moderate in severity. The update,...
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in several components of Windows. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Access to sensitive dat...
PT-2022-5303 · Juniper Networks · Juniper Networks Paragon Active Assurance
Name of the Vulnerable Software and Affected Versions: Juniper Networks Paragon Active Assurance Formerly Netrounds versions prior to 3.1.1 Juniper Networks Paragon Active Assurance Formerly Netrounds version 3.2 prior to 3.2.1 Description: The issue is related to an Improper Neutralization of...
Microsoft Windows Multiple Vulnerabilities (KB5018411)
This host is missing an important security update according to Microsoft KB5018411 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Windows Multiple Vulnerabilities (KB5018419)
This host is missing an important security update according to Microsoft KB5018419 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2022-38042
Active Directory Domain Services Elevation of Privilege Vulnerability...
CVE-2022-38042
Active Directory Domain Services Elevation of Privilege Vulnerability...
CVE-2022-38042
Active Directory Domain Services Elevation of Privilege Vulnerability...
CVE-2022-37978
Windows Active Directory Certificate Services Security Feature Bypass...
CVE-2022-37976
Active Directory Certificate Services Elevation of Privilege Vulnerability...
CVE-2022-37976
Active Directory Certificate Services Elevation of Privilege Vulnerability...