14920 matches found
PT-2020-3238
Name of the Vulnerable Software and Affected Versions Oracle Configuration Manager version 12.1.2.0.6 Description The issue exists due to insufficient input validation in the Discovery and collection script component of Oracle Configuration Manager. This allows a remote attacker to gain...
CVE-2020-2984: Undefined Security Weakness
Vulnerability in the Oracle Configuration Manager product of Oracle Enterprise Manager component: Discovery and collection script. The supported version that is affected is 12.1.2.0.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...
CVE-2020-1085
An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'...
CVE-2020-1085
An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'...
Privilege escalation
An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'...
CVE-2020-1085
CVE-2020-1085 is described in CNVD-2020-52929 as an elevation of privilege in the Windows Function Discovery Service. The vulnerability stems from how the Function Discovery Service handles objects in memory, enabling an attacker to execute code with elevated privileges on affected Windows system...
CVE-2020-1085
An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'...
Windows Function Discovery Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker...
CVE-2020-1085: Undefined Security Weakness
An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'...
PT-2020-3082
Name of the Vulnerable Software and Affected Versions Windows Function Discovery Service affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the way the Windows Function Discovery Service handles objects in memory. This vulnerability can ...
contractorsupplymagazine.com Cross Site Scripting vulnerability OBB-1224096
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
arcws.com Cross Site Scripting vulnerability OBB-1220997
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
[SECURITY] Fedora 31 Update: gssdp-1.0.4-1.fc31
GSSDP implements resource discovery and announcement over SSDP and is part of gUPnP. GUPnP is an object-oriented open source framework for creating UPnP devices and control points, written in C using GObject and libsoup. The GUPnP API is intended to be easy to use, efficient and flexible...
Cisco FXOS, NX-OS, and UCS Manager Software Cisco Discovery Protocol DoS (cisco-sa-20180620-nxos-cdp)
According to its self-reported version, Cisco NX-OS Software is affected by a denial of service DoS vulnerability exists in Cisco Discovery Protocol due to failure to properly validate certain fields within a Cisco Discovery Protocol message. An unauthenticated, adjacent attacker can exploit this...
Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution (cisco-sa-20180620-fxnxos-dos)
According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the Cisco Discovery Protocol due to insufficiently validated packet headers. An unauthenticated, adjacent attacker can exploit this, via a crafted Cisco Discovery Protocol packet, to execute arbitrary...
Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution (cisco-sa-20180620-fxnxos-dos)
According to its self-reported version, Cisco FXOS Software is affected by a vulnerability in the Cisco Discovery Protocol due to insufficiently validated packet headers. An unauthenticated, adjacent attacker can exploit this, via a crafted Cisco Discovery Protocol packet, to execute arbitrary...
TAU Threat Discovery: Conti Ransomware
Conti is a new family of ransomware observed in the wild by the Carbon Black Threat Analysis Unit TAU. Unlike most ransomware, Conti contains unique features that separate it in terms of performance and focus on network-based targets. Conti uses a large number of independent threads to perform...
Exploit for Path Traversal in F5 Big-Ip_Access_Policy_Manager
Cve-2020-5029-finder It is a small script to fetch out the s...
The Only Constant Is Change -- Rethinking Secure Access for a New Workforce
It seems like a long time ago now when IT teams had their annual strategy meeting, where topics related to network modernization with SASE or SD-WANs, remote access, threat prevention, and cloud adoption were likely discussed. COVID-19, however, has caused a lot of these initiatives to take a...