11776 matches found
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.5 security update
An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...
undertow: special character in query results in server errors
A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an attacker using query strings with non-RFC compliant characters resulting in a denial of service. The highest threat from this vulnerability is to system availability...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.5 security update
An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...
wildfly: resource adapter logs plaintext JMS password at warning level on connection error
A flaw was found in wildfly. JMS passwords are logged by the resource adaptor in plain text at the warning level when a connection error occurs allowing any user that has access to the log to gain access to this sensitive information. The highest threat from this vulnerability is to data...
Google Forms Set Baseline For Widespread BEC Attacks
A threat actor has been sending thousands of emails to organizations, in what researchers warn is a reconnaissance campaign to identify targets for a possible follow-up business-email-compromise BEC attack. So far, researchers have observed thousands of messages being sent to companies since...
The vulnerability of the CSC service in the Windows operating system allows attackers to escalate their privileges.
The vulnerability of the CSC service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...
PT-2021-7418 · Unknown +5 · Graphicsmagick +5
Name of the Vulnerable Software and Affected Versions: GraphicsMagick affected versions not specified Description: The issue is related to a heap buffer overflow when parsing MIFF, which can be exploited to impact the confidentiality, integrity, and availability of protected information. This is...
The vulnerability of the CSC service in the Windows operating system allows attackers to escalate their privileges.
The vulnerability of the CSC service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of the Windows operating system’s tracing service allows a hacker to increase their privileges.
The vulnerability of the Windows operating system’s tracing service is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of the Active Template Library in the Windows operating system allows attackers to exploit their privileges.
The vulnerability of the Active Template Library in the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of the CSC service in the Windows operating system allows attackers to escalate their privileges.
The vulnerability of the CSC service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the splwow64.exe process in the Windows operating system, which allows a hacker to escalate their privileges
The vulnerability of the splwow64.exe process in Windows operating systems is related to call processing errors. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of Windows Event Logging, a service in the Windows operating system, allows a perpetrator to escalate their privileges.
The vulnerability of the Windows Event Logging service is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Remote Desktop Services RDS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability in the Pingsender process implementation of the Mozilla Firefox browser allows a hacker to increase their privileges.
The vulnerability in the Pingsender process of the Mozilla Firefox browser is related to errors during the download of the libcurl library. Exploiting this vulnerability can allow attackers to gain increased privileges...
Nextcloud: [nextcloud.com] Control character allowed in Submit Question
Issue descriptions We found that the maximum length of the first and last name fields was not set to 32 characters at registration and to 1000 characters when using the profile update form. The attacker can use this method as a malware attack, the user will redirect to a website that contains...
IBM Planning Analytics 信息泄露漏洞
IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. An information disclosure vulnerability exists in IBM Planning Analytics 2.0. The vulnerability...
The vulnerability of the io_uring function in the Linux operating system’s kernel allows attackers to increase their privileges.
The vulnerability of the iouring function in the Linux operating system’s kernel is related to privilege assignment errors. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the remote desktop service for Windows operating systems allows attackers to circumvent existing security restrictions and gain unauthorized access to the application.
The vulnerability of the remote desktop service for Windows operating systems is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and gain unauthorized access to the application...
BigBountyRecon - This Tool Utilises 58 Different Techniques To Expediate The Process Of Intial Reconnaissance On The Target Organisation
BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation. Reconnaissance is the most important step in any penetration testing or a bug hunting process. It provides an attacke...