11752 matches found
PT-2023-1644 · Microsoft · Office Onenote
Name of the Vulnerable Software and Affected Versions: Microsoft OneNote affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of Microsoft OneNote. Exploitation of this issue may allow a remote attacker to elevate...
PT-2023-1421 · Microsoft · Azure App Service
Name of the Vulnerable Software and Affected Versions: Azure App Service on Azure Stack Hub affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Azure App Service on Azure Stack Hub. It is associated with access control errors. Exploitati...
5 Cloud Security Challenges Solved by CNAPP
Configuration errors are a major cause of cloud security challenges for modern DevOps teams, introducing a new attack surface with numerous potential points of vulnerability. Read on to discover some of the most common errors and learn how to resolve them...
The vulnerability in the implementation of the URL filtering mechanism for Cisco AsyncOS operating systems in Cisco Email Security Appliance (ESA) systems allows attackers to circumvent security restrictions.
The vulnerability of the URL filtering mechanism implemented in Cisco AsyncOS operating systems for Cisco Email Security Appliance ESA systems relates to security configuration errors. Exploiting this vulnerability can allow a malicious actor to circumvent security restrictions remotely...
Vulnerability of operating systems tvOS, iOS, macOS, iPadOS, and the Safari browser, related to type conversion errors, allowing attackers to execute arbitrary code.
The vulnerabilities of operating systems such as tvOS, iOS, macOS, iPadOS, and the Safari browser are related to type conversion errors. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...
Business Logic Errors
heimdal is vulnerable to Business Logic Flaws. The vulnerability exists due to accidental logic inversions which allows an attacker to perform unwanted actions...
The vulnerability of the software for server-based web applications, LiteSpeed and OpenLiteSpeed, allows a perpetrator to execute arbitrary code.
The vulnerability of the LiteSpeed and OpenLiteSpeed web application server software relates to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
USN-5861-1: Linux kernel (Dell300x) vulnerabilities
It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-43945 Tamás Koczka discovered that th...
Chrome 110 Tackles a Collection of Security Weaknesses
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Google Chrome version 110 is now being rolled out to the stable channels for Windows, Mac, and Linux users. This update includes bug fixes and improvements, specifically addressing security issues...
SAMSUNG Mobile devices 缓冲区错误漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Jan-2023 Release 1 and earlier, which stems from an out-of-bounds read vulnerability in the...
The vulnerability of the Atlassian Jira Service Management and Data Center data processing software, related to authentication errors, allows attackers to escalate their privileges.
The vulnerability of the Atlassian Jira Service Management and Data Center data processing software lies in authentication errors. Exploiting this vulnerability can allow attackers to increase their privileges remotely...
The execution environment vulnerability for JavaScript and TypeScript Deno, related to synchronization errors when using a shared resource, allows a perpetrator to execute arbitrary code.
The vulnerability of the execution environment for JavaScript and TypeScript in Deno is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of the ImageMagick graphic editor lies in errors during the processing of input data, allowing attackers to gain access to protected information.
The vulnerability of the ImageMagick graphic editor is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information using the “profile” parameter...
The vulnerability of the Upload component of the software environment for working with Oracle Web Applications desktop integrations allows a hacker to gain full control over the application.
The vulnerability of the Upload component of the software environment for working with Oracle Web Applications Desktop Integrator relates to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...
The vulnerability of the libssh2 library, which implements Git methods in C language using Libgit2, allows a attacker to perform a type of “man-in-the-middle” attack.
The vulnerability of the libssh2 library, which implements Git methods in C using Libgit2, is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...
The vulnerability of the Edge AutoFill Protection() function in the Microsoft Edge browser allows a perpetrator to disclose protected information.
The vulnerability of the Edge AutoFill Protection function in the Microsoft Edge browser is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information through a specially created link...
No-check liquidity is != 0
Lines of code Vulnerability details Impact Proof of Concept Tools Used manual Recommended Mitigation Steps --- The text was updated successfully, but these errors were encountered: All reactions...
The vulnerability of the mobile application for collaborative work with documents, IBM Navigator Mobile for Android operating systems, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the IBM Navigator Mobile mobile application for collaborative document work on Android operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Damage Cleanup Engine in the Trend Micro Maximum Security antivirus protection software allows a malicious actor to enhance their privileges.
The vulnerability of the Damage Cleanup Engine in the Trend Micro Maximum Security antivirus software is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to increase their privileges...
