PT-2024-5628 · Microsoft · Local Security Authority (Lsa) Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority LSA Server affected versions not specified Description: The issue is related to the use of an uninitialized resource in the Microsoft Local Security Authority LSA Server. Exploitation of this issue may allow...

Microsoft Local Security Authority Server 安全漏洞

Microsoft Local Security Authority Server is an LSA authentication service from Microsoft Corporation USA. A security vulnerability exists in Microsoft Local Security Authority Server. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and...

CVE-2024-7399

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority...

CVE-2022-38322

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-7399

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority...

CVE-2024-7399

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority...

CVE-2024-7399

CVE-2024-7399 affects Samsung MagicINFO 9 Server prior to 21.1050. A path-traversal flaw in the SWUpdateFileUploader servlet allows writing arbitrary JSP files with SYSTEM privileges, enabling remote code execution (RCE) and full server compromise. Exploitation is reported as unauthenticated via ...

SUSE CVE-2019-25161

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SUSE CVE-2021-47213

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SUSE CVE-2023-52651

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SUSE CVE-2023-52830

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SUSE CVE-2024-41024

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SUSE CVE-2024-41071

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SUSE CVE-2024-42116

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SUSE CVE-2024-42226

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

PT-2024-41006 · Mozilla · Ca-Certificates-Mozilla

Name of the Vulnerable Software and Affected Versions: ca-certificates-mozilla versions prior to 2.68 Description: This issue involves updates to the Mozilla SSL root CAs, including additions and removals of various root certificates. The updates include the addition of certificates such as...

New Patent Application for Car-to-Car Surveillance

Ford has a new patent application for a system where cars monitor each others speeds, and then report then to some central authority. Slashdot thread...

PT-2024-37913 · Undefined · Undefined

"Source": "CVE FEED", "Title": "CVE-2024-6865 - CVE-2006-0045: Adobe Flash Player Cross-Site Scripting", "Content": "CVE ID : CVE-2024-6865 Published : Aug. 5, 2024, 2:15 p.m. | 42 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-41948 biscuit-java vulnerable to public key confusion in third party block

biscuit-java is the java implementation of Biscuit, an authentication and authorization token for microservices architectures. Third-party blocks can be generated without transferring the whole token to the third-party authority. Instead, a ThirdPartyBlock request can be sent, providing only the...

CVE-2024-41948 biscuit-java vulnerable to public key confusion in third party block

biscuit-java is the java implementation of Biscuit, an authentication and authorization token for microservices architectures. Third-party blocks can be generated without transferring the whole token to the third-party authority. Instead, a ThirdPartyBlock request can be sent, providing only the...