The vulnerability of the Visual Basic Runtime environment for Yokogawa software products, related to privilege management errors, allows a perpetrator to execute arbitrary code.

The vulnerability of the Visual Basic Runtime environment for Yokogawa software products is related to privilege management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Pulse Connect Secure corporate network VPN server, related to authentication errors, allows a perpetrator to execute arbitrary code.

The vulnerability of the Pulse Connect Secure VPN server for corporate networks is related to authentication errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of Microprogrammed Network Interface Software of Cisco Adaptive Security Appliance Software (ASA) and Cisco Firepower Threat Defense (FTD) relates to session timeout errors, which allow attackers to trigger a device reboot or cause a service failure.

The vulnerability of Microprogrammed Network Interface Software of Cisco Adaptive Security Appliance Software ASA and Cisco Firepower Threat Defense FTD is related to session timeout errors. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause a service...

PT-2021-2984 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the software, which could allow an unauthenticated, remote attacker to execute arbitrary code, gain access to...

PT-2021-3452

Name of the Vulnerable Software and Affected Versions Trend Micro Home Network Security versions 6.5.599 and earlier Description The issue is related to a file-parsing vulnerability, which could allow an attacker to cause a denial-of-service to the device. It is also described as being related to...

The vulnerability of Mitsubishi Electric’s graphic control panel software for the GOT2000 and GOT SIMPLE series lies in authentication errors, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Mitsubishi Electric’s GOT2000 and GOT SIMPLE graphic control panels relates to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2021-1489

A vulnerability in filesystem usage management for Cisco Firepower Device Manager FDM Software could allow an authenticated, remote attacker to exhaust filesystem resources, resulting in a denial of service DoS condition on an affected device. This vulnerability is due to the insufficient...

CVE-2021-1489 Cisco Firepower Device Manager Software Filesystem Space Exhaustion Denial of Service Vulnerability

A vulnerability in filesystem usage management for Cisco Firepower Device Manager FDM Software could allow an authenticated, remote attacker to exhaust filesystem resources, resulting in a denial of service DoS condition on an affected device. This vulnerability is due to the insufficient...

The vulnerability of the Microsoft Azure Active Directory cloud platform’s software, related to security configuration errors, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Microsoft Azure Active Directory software platform is related to security configuration errors. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Windows Speech Runtime component in Microsoft Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Speech Runtime component in Microsoft Windows systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...

WordPress WPGraphQL 1.3.5 Denial Of Service

Exploit Title: WordPress Plugin WPGraphQL 1.3.5 - Denial of Service Author: Dolev Farhi Date: 2021-04-12 Vendor Homepage: https://www.wpgraphql.com/ Version: 1.3.5 Tested on: Ubuntu """ This attack uses duplication of fields amplified by GraphQL batched queries, resulting in server OOM and MySQL...

WPGraphQL < 1.3.6 - Denial of Service

The plugin suffers from a Denial of Service vulnerability by Field Duplication. It is possible to create an expensive query by duplicating the number of fields, while simultaneously sending these requests in batches using GraphQL's Batching capability. v1.3.6 added a setting to disable batch...

Security update for nim (moderate)

openSUSE Security Update: Security update for nim Announcement ID: openSUSE-SU-2021:0618-1 Rating: moderate References: 1185083 1185084 1185085 Cross-References: CVE-2021-21372 CVE-2021-21373 CVE-2021-21374 CVSS scores: CVE-2021-21374 NVD : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affecte...

OPENSUSE-SU-2021:0598-1 Security update for shim

This update for shim fixes the following issues: - Updated openSUSE x86 signature - Avoid the error message during linux system boot boo1184454 - Prevent the build id being added to the binary. That can cause issues with the signature Update to 15.4 boo1182057 + Rename the SBAT variable and fix t...

The vulnerability affects components of Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud, Kaspersky Small Office Security, and Kaspersky Endpoint Security for Windows. This vulnerability allows attackers to elevate their privileges and execute arbitrary code.

The vulnerability of components such as Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud, Kaspersky Small Office Security, and Kaspersky Endpoint Security for Windows relates to errors in permission and privilege management. Exploiting this...

The vulnerability of the Windows Speech Runtime component of the Windows operating system, which allows attackers to exploit their privileges

The vulnerability of the Windows Graphics Device Interface Plus GDI+ component in operating systems involves privilege management errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...

PT-2021-30915

Уязвимость среды выполнения Visual Basic Runtime программных продуктов Yokogawa связана с ошибками управления привилегиями. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

Citrix Receiver Does Not Respond When Opening Applications to XenApp Servers

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. When opening applications to XenApp servers, there is no response at the Launching… prompt, as shown...

The vulnerability of the Windows operating system’s WLAN service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows WLAN operating system is related to security configuration errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability in the implementation of the Microsoft Server Message Block (SMB) network protocol on Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Server Message Block SMB network protocol implementation in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...