98 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-47121
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: caif: fix memory leak in cfusbldevicenotify In case of caifenrolldev fail, allocated linksupport won't be assigned to the corresponding structure. So simpl...
Linux Distros Unpatched Vulnerability : CVE-2021-47122
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: caif: fix memory leak in caifdevicenotify In case of caifenrolldev fail, allocated...
CVE-2024-5371
A vulnerability classified as problematic has been found in Kashipara College Management System 1.0. This affects an unknown part of the file submitenrollstudent.php. The manipulation of the argument classname leads to cross site scripting. It is possible to initiate the attack remotely. The...
CVE-2024-51720 Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE
An insufficient entropy vulnerability in the SecuSUITE Secure Client Authentication SCA Server of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially enroll an attacker-controlled device to the victim’s account and telephone number...
PT-2024-39260 · Rubygems +3 · Devise-Two-Factor +3
Name of the Vulnerable Software and Affected Versions: Devise-Two-Factor versions 1.0.0 or = 2.2.0 through = 2.2.0 through 6.0.0, upgrade to version v6.0.0 as soon as possible. If upgrading is not possible, override the default otp secret length attribute in the model when configuring two factor...
The vulnerability of the Windows Enroll Engine component in Windows operating systems allows a hacker to bypass security restrictions.
The vulnerability of the Windows Enroll Engine component in Windows operating systems is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a perpetrator to circumvent security restrictions...
CVE-2024-38069
Windows Enroll Engine Security Feature Bypass Vulnerability...
CVE-2024-38069
Windows Enroll Engine Security Feature Bypass Vulnerability...
CVE-2024-38069
Technical details about CVE-2024-38069 (Windows Enroll Engine Security Feature Bypass) are not provided in the connected documents. The initial description is generic; no affected products/versions or remediation are disclosed here. Monitor for updates from official advisories.
CVE-2024-38069 Windows Enroll Engine Security Feature Bypass Vulnerability
...
CVE-2024-38069 Windows Enroll Engine Security Feature Bypass Vulnerability
...
Windows Enroll Engine Security Feature Bypass Vulnerability
...
PT-2024-4784 · Microsoft · Windows Enroll Engine +1
Name of the Vulnerable Software and Affected Versions: Windows Enroll Engine affected versions not specified Description: The issue is related to errors in cryptographic signature verification in the Windows Enroll Engine component of Windows operating systems. This allows an attacker to bypass...
CVE-2024-38069: Improper Verification of Cryptographic Signature
Windows Enroll Engine Security Feature Bypass Vulnerability...
Microsoft Windows Security Vulnerabilities
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Enroll Engine. An attacker exploiting this vulnerability could bypass certain features. The following products and versions are...
CVE-2024-5370
A vulnerability was found in Kashipara College Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file submitenrollstaff.php. The manipulation of the argument classname leads to cross site scripting. The attack may be launched...
CVE-2024-5371 Kashipara College Management System submit_enroll_student.php cross site scripting
A vulnerability classified as problematic has been found in Kashipara College Management System 1.0. This affects an unknown part of the file submitenrollstudent.php. The manipulation of the argument classname leads to cross site scripting. It is possible to initiate the attack remotely. The...
College Management System 跨站脚本漏洞
College Management System is a simple project organized by Code Projects. It is used to keep track of students, teachers, subjects, schedules and all things related to college. A cross-site scripting vulnerability exists in Kashipara College Management System version 1.0, which stems from the...
SUSE CVE-2021-47122
In the Linux kernel, the following vulnerability has been resolved: net: caif: fix memory leak in caifdevicenotify In case of caifenrolldev fail, allocated linksupport won't be assigned to the corresponding structure. So simply free allocated pointer in case of error...
SUSE CVE-2021-47121
In the Linux kernel, the following vulnerability has been resolved: net: caif: fix memory leak in cfusbldevicenotify In case of caifenrolldev fail, allocated linksupport won't be assigned to the corresponding structure. So simply free allocated pointer in case of error...