8978 matches found
Cross Site Scripting (XSS) in Assets
Description Cross-Site Scripting XSS attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. XSS attacks occur when an attacker uses a web application to send malicious code, generally in the form of a browser side script, to a differen...
The vulnerability of the Power Monitoring Expert software allows a intruder to view and modify the equipment settings.
The vulnerability of the Power Monitoring Exper software-related software is related to insufficient verification of input data. Exploiting this vulnerability allows a remote attacker to view and modify the settings of the equipment...
The software for configuring, testing, and putting into operation the Schneider Electric EcoStruxure Power Commission system is vulnerable, allowing attackers to increase their privileges.
The vulnerability of the software used for configuring, testing, and deploying Schneider Electric EcoStruxure Power Commission is related to deficiencies in the authentication process. Exploiting this vulnerability could allow attackers to enhance their privileges...
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of access control mechanisms. This allows attackers to bypass security restrictions.
The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions remotely...
China-linked Hackers Targeting Unpatched SonicWall SMA Devices with Malware
A suspecting China-linked hacking campaign has been observed targeting unpatched SonicWall Secure Mobile Access SMA 100 appliances to drop malware and establish long-term persistence. "The malware has functionality to steal user credentials, provide shell access, and persist through firmware...
Hackers Exploiting Remote Desktop Software Flaws to Deploy PlugX Malware
Security vulnerabilities in remote desktop programs such as Sunlogin and AweSun are being exploited by threat actors to deploy the PlugX malware. AhnLab Security Emergency Response Center ASEC, in a new analysis, said it marks the continued abuse of the flaws to deliver a variety of payloads on...
USN-5941-1 linux-kvm vulnerabilities
It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execut...
Huawei EulerOS: Security Advisory for compat-libtiff3 (EulerOS-SA-2023-1494)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Jenkins Security Alert: New Security Flaws Could Allow Code Execution Attacks
A pair of severe security vulnerabilities have been disclosed in the Jenkins open source automation server that could lead to code execution on targeted systems. The flaws, tracked as CVE-2023-27898 and CVE-2023-27905, impact the Jenkins server and Update Center, and have been collectively...
Jenkins Security Alert: New Security Flaws Could Allow Code Execution Attacks
A pair of severe security vulnerabilities have been disclosed in the Jenkins open source automation server that could lead to code execution on targeted systems. The flaws, tracked as CVE-2023-27898 and CVE-2023-27905, impact the Jenkins server and Update Center, and have been collectively...
Debian: Security Advisory (DLA-402-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-5934-1 linux-raspi vulnerabilities
It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execut...
The vulnerability of the Grafana data visualization web tool is related to deficiencies in authentication procedures. This allows attackers to access protected information, trigger service failures, or increase their privileges.
The vulnerability of the Grafana data processing web tool is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to access protected information, cause service failures, or increase their privileges...
The vulnerability of the monitoring system for critical equipment, StruxureWare Data Center Expert, is related to deficiencies in the authentication process, allowing a perpetrator to execute arbitrary codes.
The vulnerability of the StruxureWare Data Center Expert monitoring system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Vulnerability of the network file system (NFS) of PowerScale OneFS operating systems, which allows a intruder to gain unauthorized access to protected information or execute arbitrary code
The vulnerability of the network file system NFS in PowerScale OneFS is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or execute arbitrary code...
The vulnerability of the function for placing malicious objects in quarantine on Elastic Security and Elastic Endgame operating systems for Windows, allowing attackers to enhance their privileges.
The vulnerability of storing malicious objects in endpoint protection solutions of Elastic Security and Elastic Endgame for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Dell Command Intel vPro Out Of Band software is related to deficiencies in the authentication process, which allows a malicious individual to elevate their privileges.
The vulnerability of the Dell Command | Intel vPro Out-of-Band software is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain increased privileges...
New Flaws in TPM 2.0 Library Pose Threat to Billions of IoT and Enterprise Devices
A pair of serious security defects has been disclosed in the Trusted Platform Module TPM 2.0 reference library specification that could potentially lead to information disclosure or privilege escalation. One of the vulnerabilities, CVE-2023-1017 , concerns an out-of-bounds write, while the other,...
The vulnerability of the Fortinet FortiNAC network access control mechanism, related to deficiencies in authentication procedures, allows a perpetrator to execute arbitrary code.
The vulnerability of the Fortinet FortiNAC network access control device is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted POST requests via the HTTP protocol...
