CVE-2022-31593

SAP Business One client - version 10.0 allows an attacker with low privileges, to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

CVE-2022-31593

SAP Business One client 10.0 is affected by CVE-2022-31593. The vulnerability enables code injection by an attacker with low privileges, allowing injected code to be executed within the application and potentially enabling the attacker to control the application's behavior. The description does n...

CVE-2022-31593

SAP Business One client - version 10.0 allows an attacker with low privileges, to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

What is the Essential Eight (And Why Non-Aussies Should Care)

In 2017, The Australian Cyber Security Center ACSC published a set of mitigation strategies that were designed to help organizations to protect themselves against cyber security incidents. These strategies, which became known as the Essential Eight, are designed specifically for use on Windows...

CVE-2021-44530: Improper Input Validation

An injection vulnerability exists in a third-party library used in UniFi Network Version 6.5.53 and earlier Log4J CVE-2021-44228 allows a malicious actor to control the application...

CVE-2022-21906

Windows Defender Application Control Security Feature Bypass Vulnerability...

CVE-2022-21906

Windows Defender Application Control Security Feature Bypass Vulnerability...

CVE-2022-21906

Windows Defender Application Control Security Feature Bypass Vulnerability...

CVE-2022-21906 Windows Defender Application Control Security Feature Bypass Vulnerability

...

Windows Defender Application Control Security Feature Bypass Vulnerability

...

CVE-2022-21906: Undefined Security Weakness

Windows Defender Application Control Security Feature Bypass Vulnerability...

The vulnerability of the Application Control Block in FortiOS operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Application Control Block in FortiOS operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2021-44231

Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

CVE-2021-44231

Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

CVE-2021-40499

Client-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application Server for ABAP - versions 7.70, 7.70 PI, 7.70 BYD, allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

CVE-2021-40499

Client-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application Server for ABAP - versions 7.70, 7.70 PI, 7.70 BYD, allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

A New Bug in Microsoft Windows Could Let Hackers Easily Install a Rootkit

Security researchers have disclosed an unpatched weakness in Microsoft Windows Platform Binary Table WPBT affecting all Windows-based devices since Windows 8 that could be potentially exploited to install a rootkit and compromise the integrity of devices. "These flaws make every Windows system...

Design/Logic Flaw

Dell EMC PowerScale OneFS contains an untrusted search path vulnerability. This vulnerability allows a user with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE and ISIPRIVSYSUPGRADE or ISIPRIVAUDIT to provide an untrusted path which can lead to run resources that are not under the application’s direct...

File Containment Vulnerability in Xinhua SecPath ACG1000

The H3C SecPath ACG1000 is a next-generation application control gateway. A file inclusion vulnerability exists in the H3C SecPath ACG1000, which can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in EG Application Control Engine

Ruijie Networks EG Application Control Engine is a multi-service integrated gateway product launched by Ruijie Networks to solve the current network egress challenges. A command execution vulnerability exists in the EG Application Control Engine, which can be exploited by an attacker to gain serv...