3633 matches found
GHSA-VXVM-QWW3-2FH7 MongoDB Driver may publish events containing authentication-related data
Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed. Without due care, an application may...
“The Access Policy has externally been modified and cannot be changed by Studio” warning message
After setting access policy rule, “Access Policy” option in “Edit Delivery Group” dialog cannot display. ------------------------ Add-PSSnapin -Name Citrix. Set-BrokerAccessPolicyRule 'AG' -IncludedClientIPFilterEnabled $True Set-BrokerAccessPolicyRule 'AG' -IncludedClientIPs xxx.xxx.xxx.xxx...
Important: kernel-livepatch-4.14.314-238.539
Issue Overview: A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb-cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIGIPVLA...
Important: kernel-livepatch-4.14.313-235.533
Issue Overview: A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb-cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIGIPVLA...
USN-6301-1 linux-hwe-5.4, linux-xilinx-zynqmp vulnerabilities
It was discovered that the netlink implementation in the Linux kernel did not properly validate policies when parsing attributes in some situations. An attacker could use this to cause a denial of service infinite recursion. CVE-2020-36691 Billy Jheng Bing Jhong discovered that the CIFS network...
PHP Code Issues Vulnerabilities
PHP is a scripting language for PHP that executes on the server side. PHP suffers from a code issue vulnerability that stems from loading external entities without XML enabled, resulting in a local file disclosure. Affected products and versions: PHP version 8.0 prior to 8.0.30, version 8.1 prior...
Interpol Busts Phishing-as-a-Service Platform '16Shop,' Leading to 3 Arrests
Interpol has announced the takedown of a phishing-as-a-service PhaaS platform called 16Shop, in addition to the arrests of three individuals in Indonesia and Japan. 16Shop specialized in the sales of phishing kits that other cybercriminals can purchase to mount phishing attacks on a large scale,...
Ubiquiti UniFi Input Validation Error Vulnerability
Ubiquiti UniFi is a wireless networking system from Ubiquiti, Inc. A security vulnerability exists in Ubiquiti UniFi Access Points 6.5.50 and earlier, and Switches 6.5.32 and earlier, which stems from an integer overflow vulnerability in UniFi Access Points and Switches except Switch Flex Mini wi...
PYSEC-2023-321
The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP traffic to selected IP addresses and services even while...
PT-2023-6277
Name of the Vulnerable Software and Affected Versions WireGuard client version 0.5.3 Description The issue is related to errors in handling links, allowing a remote attacker to block IP traffic to selected IP addresses. This can be exploited to trick the victim into blocking IP traffic to chosen ...
CVE-2023-38176
Azure Arc-Enabled Servers Elevation of Privilege Vulnerability...
Privilege escalation
Azure Arc-Enabled Servers Elevation of Privilege Vulnerability...
CVE-2023-38176 Azure Arc-Enabled Servers Elevation of Privilege Vulnerability
...
CVE-2023-38176
CVE-2023-38176 is an elevation-of-privilege vulnerability in Azure Arc-Enabled Servers. Multiple sources (NVD, CNVD, MSRC advisories, and NCSc) confirm it allows an attacker to gain elevated privileges within the affected Arc environment (Azure Arc-Enabled Servers). The issue is categorized as an...
Azure Arc-Enabled Servers Elevation of Privilege Vulnerability
...
CVE-2023-38176: Improper Limitation of a Pathname to a Restricted Directory
Azure Arc-Enabled Servers Elevation of Privilege Vulnerability...
PT-2023-26323 · Microsoft · Azure Arc-Enabled Servers
Name of the Vulnerable Software and Affected Versions: Azure Arc-Enabled Servers affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or...
CVE-2023-4012
ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...
