The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Server Subscription Edition packages lies in information representation errors in the user interface, which allows attackers to perform spoofing attacks.

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Server Subscription Edition packages is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Server Subscription Edition packages lies in information representation errors in the user interface, which allows attackers to perform spoofing attacks.

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Server Subscription Edition packages is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...

The vulnerability of Huawei 535-232a router’s micro-programming software, related to access control errors when processing domain names, allows a hacker to intercept packets.

The vulnerability of Huawei 535-232a router’s microprogramming software is related to access control errors during the processing of domain names. Exploiting this vulnerability allows a remote attacker to intercept packets...

The vulnerability of the Windows Bus Filter driver in Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Windows Bus Filter driver in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

PT-2023-6805 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can allow an attacker to conduct spoofing attacks. Recommendations: At the moment,...

The vulnerability of the Magento Commerce software platform for developing and managing online stores, related to errors in XML request processing, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Magento Commerce development and management software platform is related to errors in processing XML requests. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information from a remote location...

The vulnerability of the Windows DNS service for Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the Windows DNS service for Windows operating systems is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a malicious actor to perform spoofing attacks remotely...

The vulnerability of the Windows SMB Witness service allows a hacker to bypass access control procedures for RPC processes.

The vulnerability of the Windows SMB Witness service for Windows operating systems is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass access checks for RPC procedures using a specially created script...

The vulnerability of the Windows Server operating system allows a perpetrator to bypass access control for RPC procedures.

The vulnerability of Windows Server operating system services is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass access control procedures for RPC calls using a specially created script...

Microsoft Edge’s vulnerability, related to security configuration errors, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created link...

The vulnerability of the Grafana data visualization web tool, related to synchronization errors, allows attackers to trigger a service failure.

The vulnerability of the Grafana data visualization web tool is related to synchronization errors when using publicly accessible information panels. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20230616-04

Libxml2 library vulnerability is related to NULL pointer dereferencing error in the xmlSchemaFixupComplexType. Exploitation of the vulnerability could allow an attacker acting remotely, to transmit specially crafted data to an application and perform a denial of service attack. The Libxml2 librar...

GHSA-28VP-39RF-3Q2J Magento Open Source has Business Logic Errors Vulnerability

Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by a Business Logic Errors vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass a minor functionality. Exploitation ...

Magento Open Source has Business Logic Errors Vulnerability

Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by a Business Logic Errors vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass a minor functionality. Exploitation ...

CVE-2023-29294

Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by a Business Logic Errors vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass a minor functionality. Exploitation ...

UBUNTU-CVE-2023-21137

In several methods of JobStore.java, uncaught exceptions in job map parsing could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Androi...

Security feature bypass

Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by a Business Logic Errors vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass a minor functionality. Exploitation ...

UBUNTU-CVE-2023-34454

snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing an unrecoverable fatal error. The function compresschar input in the file Snappy.java receives an array of characters and compresses it. I...

CVE-2023-34453 snappy-java's Integer Overflow vulnerability in shuffle leads to DoS

snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing a fatal error. The function shuffleint input in the file BitShuffle.java receives an array of integers and applies a bit shuffle on it. It...

CVE-2023-29294

Summary: CVE-2023-29294 affects Adobe Commerce (and Magento) versions 2.4.6 and earlier, 2.4.5-p2 and earlier, and 2.4.4-p3 and earlier. It is described as a business logic error that could allow a low-privilege attacker to bypass a security feature without user interaction. The CVE entry cites a...