Vulnerabilities fixed in Microsoft Visual Studio

Microsoft has fixed vulnerabilities in Visual Studio. The vulnerabilities are located in the git code used by Visual Studio used and allow a malicious party to access gain access to sensitive data, or to execute arbitrary code execute code with the victim's privileges. Because Visual Studio is a...

CVE-2023-25616

In some scenario, SAP Business Objects Business Intelligence Platform CMC - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact th...

Exploit for OS Command Injection in Netmodule Netmodule_Router_Software

Analyzing and Reproducing the Command Injection Vulnerabilit...

CVE-2023-25144

An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and create arbitrary directories with arbitrary ownership...

Improper access control

An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and create arbitrary directories with arbitrary ownership...

SUSE SLES15 / openSUSE 15 Security Update : nodejs12 (SUSE-SU-2023:0682-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0682-1 advisory. - CVE-2023-23920: Fixed insecure loading of ICU data through ICUDATA environment bsc1208487. Tenable has extracted the precedi...

PT-2023-16740 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 15.7.8 GitLab CE/EE versions 15.8.0 through 15.8.3 GitLab CE/EE versions 15.9.0 through 15.9.1 Description: A malicious project Maintainer may create a Project Access Token with Owner level privileges using a...

Atlassian Confluence < 7.4.10 DLL Hijacking

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 7.4.10 or 7.5.0 prior to 7.12.3. It therefore may be affected by a weakness when deployed onto the Windows operating system environment allows allow authenticated local...

Atlassian Confluence 7.1.x < 7.12.3 DLL Hijacking

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 7.4.10 or 7.5.0 prior to 7.12.3. It therefore may be affected by a weakness when deployed onto the Windows operating system environment allows allow authenticated local...

CVE-2023-25144

An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and create arbitrary directories with arbitrary ownership...

CVE-2023-25144

Trend Micro Apex One shows a local privilege-escalation vulnerability (CVE-2023-25144) due to improper access control in the Apex One agent, enabling creation of arbitrary directories with arbitrary ownership. Affected component: Apex One agent; impact: elevated privileges. Remediation is availab...

CVE-2023-25144

An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and create arbitrary directories with arbitrary ownership...

About the security content of GarageBand for macOS 10.4.8

About the security content of GarageBand for macOS 10.4.8 This document describes the security content of GarageBand for macOS 10.4.8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

PT-2023-1866 · Apple · Garageband

Name of the Vulnerable Software and Affected Versions: GarageBand for macOS versions prior to 10.4.8 Description: The issue is related to insufficient access controls in GarageBand for macOS, which may allow an attacker to gain elevated privileges. This can occur during the installation of...

Google Android elevation of privilege vulnerability (CNVD-2023-26070)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates from a privilege bypass in resolveAttributionSource of ServiceUtilities.cpp, which can be exploited by an attacker to gain elevated...

Google Android elevation of privilege vulnerability (CNVD-2023-26074)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by attackers to gain elevated privileges...

Google Android elevation of privilege vulnerability (CNVD-2023-26066)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges...

Google Android elevation of privilege vulnerability (CNVD-2023-26078)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by attackers to gain elevated privileges...

Google Android elevation of privilege vulnerability (CNVD-2023-26069)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges...

The vulnerability of the installed Windows operating system on HP laptops allows attackers to gain elevated privileges.

The vulnerability of the installed Windows operating system on HP laptops relates to incorrect path name restrictions for the restricted access directory. Exploiting this vulnerability can allow attackers to gain increased privileges...