16837 matches found
CVE-2024-52010 Zoraxy has an authenticated command injection in the Web SSH feature
Zoraxy is a general purpose HTTP reverse proxy and forwarding tool. A command injection vulnerability in the Web SSH feature allows an authenticated attacker to execute arbitrary commands as root on the host. Zoraxy has a Web SSH terminal feature that allows authenticated users to connect to SSH...
CVE-2024-52010 Zoraxy has an authenticated command injection in the Web SSH feature
Zoraxy is a general purpose HTTP reverse proxy and forwarding tool. A command injection vulnerability in the Web SSH feature allows an authenticated attacker to execute arbitrary commands as root on the host. Zoraxy has a Web SSH terminal feature that allows authenticated users to connect to SSH...
kernel: drm/amdgpu: Fix potential null pointer derefernce
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix potential null pointer derefernce The amdgpurasgetcontext may return NULL if device not support ras feature, so add check before using...
Description of the security update for SharePoint Enterprise Server 2016: November 12, 2024 (KB5002654)
None None...
Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability
...
Microsoft Word 输入验证错误漏洞
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A security feature bypass vulnerability exists in Microsoft Word, which can be exploited by an attacker to bypass security restrictions...
Microsoft SQL Server 安全漏洞
Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are...
Microsoft SQL Server 安全漏洞
Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...
Microsoft SQL Server 安全漏洞
Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...
CVE-2024-8534: Improper Restriction of Operations within the Bounds of a Memory Buffer
Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway VPN Vserver with RDP Feature enabled OR the appliance must be configured as a Gateway VPN Vserver and RDP Proxy Server Profile is created an...
Microsoft SQL Server 安全漏洞
Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...
Microsoft Windows Defender Application Control 安全漏洞
Microsoft Windows Defender Application Control WDAC is a security tool from Microsoft Corporation USA that restricts the operation of programs at the software level by configuring policies to reduce the scope of what hackers can attack. A security vulnerability exists in Microsoft Windows Defende...
PT-2024-8159 · Microsoft · Windows Defender Application Control +1
Name of the Vulnerable Software and Affected Versions: Windows Defender Application Control WDAC affected versions not specified Description: The issue is related to a security feature bypass in Windows Defender Application Control WDAC that affects the data protection mechanism. This could allow...
Microsoft SQL Server 资源管理错误漏洞
Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A resource management error vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products a...
CVE-2024-43645: Protection Mechanism Failure
Windows Defender Application Control WDAC Security Feature Bypass Vulnerability...
Microsoft SQL Server 代码问题漏洞
Microsoft SQL Server is a large commercial database system from Microsoft Corporation that is used under Microsoft Windows. A code issue vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...
Microsoft SQL Server 安全漏洞
Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...
CVE-2024-49033: Improper Input Validation
Microsoft Word Security Feature Bypass Vulnerability...
Microsoft SQL Server 安全漏洞
Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...
Adobe Commerce 安全漏洞
Adobe Commerce is a leading global digital commerce solution for merchants and brands from Adobe. A security vulnerability exists in Adobe Commerce version 3.2.5 and prior versions, which stems from the inclusion of a server-side request forgery vulnerability that could lead to a security feature...