Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

Microsoft Windows Common Log File System Driver Security Vulnerability

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

PT-2023-5139 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to a buffer out-of-bounds operation in memory when handling BLF log files, which can allow an attacker to elevate their privileges. This i...

Heap-based Buffer Overflow

Overview CefSharp.Common is a the CefSharp Chromium-based browser component 'Core' and common 'Element' components, needed by both WPF and WinForms. Affected versions of this package are vulnerable to Heap-based Buffer Overflow when the ReadHuffmanCodes function is used. An attacker can craft a...

CVE-2022-33164

IBM Security Directory Server 7.2.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view or write to arbitrary files on the system. IBM X-Force ID: 228579...

CVE-2023-39423

The RDPData.dll file exposes the /irmdata/api/common endpoint that handles session IDs, among other features. By using a UNION SQL operator, an attacker can leak the sessions table, obtain the currently valid sessions and impersonate a currently logged-in user...

CVE-2023-39423 Improper Neutralization of Special Elements used in an SQL Command in RDPData.dll

The RDPData.dll file exposes the /irmdata/api/common endpoint that handles session IDs, among other features. By using a UNION SQL operator, an attacker can leak the sessions table, obtain the currently valid sessions and impersonate a currently logged-in user...

CVE-2023-39423 Improper Neutralization of Special Elements used in an SQL Command in RDPData.dll

The RDPData.dll file exposes the /irmdata/api/common endpoint that handles session IDs, among other features. By using a UNION SQL operator, an attacker can leak the sessions table, obtain the currently valid sessions and impersonate a currently logged-in user...

CVE-2023-35681

creationtimestamp| type| source ---|---|--- 2023-09-07 09:36:42+00:00| seen| https://t.me/truesecator/4818 2023-09-24 15:30:19+00:00| seen| https://t.me/malwaresupport/40 2026-09-01 20:00:51+00:00| seen| https://t.me/hackingAttack/117549 2026-09-02 01:01:11+00:00| seen|...

PT-2023-26944 · Resort Data Processing +1 · Irm Next Generation +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The RDPData.dll file exposes the "/irmdata/api/common" endpoint that handles session IDs, among other features. By using a UNION SQL operator, an attacker can leak the sessions table, obta...

CVE-2023-35072

creationtimestamp| type| source ---|---|--- 2023-09-05 22:16:50+00:00| seen| https://t.me/cibsecurity/69886...

CVE-2023-4634

creationtimestamp| type| source ---|---|--- 2023-09-05 11:57:15+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5085 2023-09-06 09:31:08+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/7744 2023-09-06 12:17:47+00:00| seen| https://t.me/cibsecurity/69963 2023-09-07...

SQL Injection

dataease-plugin-common is vulnerable to SQL Injection. The vulnerability exists through the PluginGridSql.xml due to the lack of query validation, allowing an attacker to gain sensitive information via a maliciously crafted string outside the blacklist function...

CVE-2023-33831

creationtimestamp| type| source ---|---|--- 2023-09-04 21:26:55+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8967 2023-09-07 08:00:59+00:00| published-proof-of-concept| https://t.me/dilagrafie/3182 2023-09-19 00:28:42+00:00| seen| https://t.me/cibsecurity/70672...

CVE-2023-37221

7Twenty BOT - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2020-19625

creationtimestamp| type| source ---|---|--- 2023-09-03 06:24:27+00:00| published-proof-of-concept| https://t.me/CNArsenal/996 2024-01-15 12:57:23+00:00| seen| https://t.me/arpsyndicate/2783 2024-11-04 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-04 2024-11-05...

CVE-2020-22612

creationtimestamp| type| source ---|---|--- 2023-09-01 20:15:26+00:00| seen| https://t.me/cibsecurity/69675...

CVE-2023-31170

creationtimestamp| type| source ---|---|--- 2023-08-31 20:13:13+00:00| seen| https://t.me/cibsecurity/69562...

cups-filters security update

An update is available for cups-filters. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The cups-filters package contains back ends, filters, and other software...

cups security update

An update is available for cups. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Common UNIX Printing System CUPS provides a portable printing layer for Linu...