11711 matches found
SUSE CVE-2023-0565
Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10...
The vulnerability of the ImageMagick graphics editor, related to resource management errors, allows a hacker to cause a service failure.
The vulnerability of the ImageMagick graphics editor is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause a service failure using the “profile” parameter...
MGASA-2023-0049 Updated phpmyadmin packages fix security vulnerability
Security fix for an XSS vulnerability in the drag-and-drop upload functionality PMASA-2023-01 Additional bugfixes including - issue 17506 Fix error when configuring 2FA without XMLWriter or Imagick issue 17519 Fix Export pages not working in certain conditions issue 17121 Fix passwordhash functio...
MITRE: CVE-2019-15126 Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device
An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors related to state transitions in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a...
PT-2023-1644 · Microsoft · Office Onenote
Name of the Vulnerable Software and Affected Versions: Microsoft OneNote affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of Microsoft OneNote. Exploitation of this issue may allow a remote attacker to elevate...
PT-2023-1421 · Microsoft · Azure App Service
Name of the Vulnerable Software and Affected Versions: Azure App Service on Azure Stack Hub affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Azure App Service on Azure Stack Hub. It is associated with access control errors. Exploitati...
5 Cloud Security Challenges Solved by CNAPP
Configuration errors are a major cause of cloud security challenges for modern DevOps teams, introducing a new attack surface with numerous potential points of vulnerability. Read on to discover some of the most common errors and learn how to resolve them...
Vulnerability of operating systems tvOS, iOS, macOS, iPadOS, and the Safari browser, related to type conversion errors, allowing attackers to execute arbitrary code.
The vulnerabilities of operating systems such as tvOS, iOS, macOS, iPadOS, and the Safari browser are related to type conversion errors. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...
The vulnerability in the implementation of the URL filtering mechanism for Cisco AsyncOS operating systems in Cisco Email Security Appliance (ESA) systems allows attackers to circumvent security restrictions.
The vulnerability of the URL filtering mechanism implemented in Cisco AsyncOS operating systems for Cisco Email Security Appliance ESA systems relates to security configuration errors. Exploiting this vulnerability can allow a malicious actor to circumvent security restrictions remotely...
Business Logic Errors
heimdal is vulnerable to Business Logic Flaws. The vulnerability exists due to accidental logic inversions which allows an attacker to perform unwanted actions...
The vulnerability of the software for server-based web applications, LiteSpeed and OpenLiteSpeed, allows a perpetrator to execute arbitrary code.
The vulnerability of the LiteSpeed and OpenLiteSpeed web application server software relates to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
USN-5861-1: Linux kernel (Dell300x) vulnerabilities
It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-43945 Tamás Koczka discovered that th...
Chrome 110 Tackles a Collection of Security Weaknesses
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Google Chrome version 110 is now being rolled out to the stable channels for Windows, Mac, and Linux users. This update includes bug fixes and improvements, specifically addressing security issues...
SAMSUNG Mobile devices 缓冲区错误漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Jan-2023 Release 1 and earlier, which stems from an out-of-bounds read vulnerability in the...
The vulnerability of the Atlassian Jira Service Management and Data Center data processing software, related to authentication errors, allows attackers to escalate their privileges.
The vulnerability of the Atlassian Jira Service Management and Data Center data processing software lies in authentication errors. Exploiting this vulnerability can allow attackers to increase their privileges remotely...
The execution environment vulnerability for JavaScript and TypeScript Deno, related to synchronization errors when using a shared resource, allows a perpetrator to execute arbitrary code.
The vulnerability of the execution environment for JavaScript and TypeScript in Deno is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of the ImageMagick graphic editor lies in errors during the processing of input data, allowing attackers to gain access to protected information.
The vulnerability of the ImageMagick graphic editor is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information using the “profile” parameter...
The vulnerability of the Upload component of the software environment for working with Oracle Web Applications desktop integrations allows a hacker to gain full control over the application.
The vulnerability of the Upload component of the software environment for working with Oracle Web Applications Desktop Integrator relates to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...
The vulnerability of the libssh2 library, which implements Git methods in C language using Libgit2, allows a attacker to perform a type of “man-in-the-middle” attack.
The vulnerability of the libssh2 library, which implements Git methods in C using Libgit2, is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...
