Siemens RUGGEDCOM CROSSBOW Authentication Vulnerability Missing Critical Functions

RUGGEDCOM CROSSBOW is a secure access management solution designed to provide NERC CIP compliant access to smart electronic devices. An authentication vulnerability in Siemens RUGGEDCOM CROSSBOW that lacks critical functionality can be exploited by an attacker to write arbitrary files to the file...

Debian DSA-5473-1 : orthanc - security update

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5473 advisory. It was discovered that authenticated API users of Orthanc, a DICOM server for medical imaging, could overwrite arbitrary files and in some setups execute arbitrary...

PHOENIX CONTACTs WP 6xxx series web panels Security Vulnerability

PHOENIX CONTACTs WP 6xxx series web panels are a series of web panels from PHOENIX CONTACTs, Germany. A security vulnerability exists in PHOENIX CONTACT WP 6xxx series versions prior to 4.0.10, which originates in the web panels, where a remote attacker with low privileges can gain limited read...

CVE-2023-36900

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2023-36900

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2023-36900

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2023-35378

Windows Projected File System Elevation of Privilege Vulnerability...

CVE-2023-35378

Windows Projected File System Elevation of Privilege Vulnerability...

CVE-2023-35378

Windows Projected File System Elevation of Privilege Vulnerability...

Privilege escalation

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

Privilege escalation

Windows Projected File System Elevation of Privilege Vulnerability...

CVE-2023-35378

CVE-2023-35378 is a Windows Projected File System Elevation of Privilege vulnerability. The provided sources identify it as affecting Windows OS via the Projected File System component and assign a high impact with local attack vector and no user interaction required (CVSSv3.1: AV=L/AC=H/PR=L/UI=...

CVE-2023-35378 Windows Projected File System Elevation of Privilege Vulnerability

...

CVE-2023-35378 Windows Projected File System Elevation of Privilege Vulnerability

...

CVE-2023-36900 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2023-37454

A use-after-free flaw was found in the UDF file system in the Linux kernel. This issue could allow a malicious user to crash the system, resulting in a denial of service...

kernel: OOB access in the Linux kernel's XFS subsystem

An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure with a dirty log journal. This flaw allows a local user to crash or potentially escalate their privileges on the system...

kernel: OOB access in the Linux kernel's XFS subsystem

An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure with a dirty log journal. This flaw allows a local user to crash or potentially escalate their privileges on the system...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

Microsoft Windows Common Log File System Driver Security Vulnerability

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...