The vulnerability of the Local Security Architecture (LSA) of Microsoft Windows operating systems allows attackers to bypass security restrictions and increase their privileges.

The vulnerability of the Local Security Architecture LSA of Microsoft Windows operating systems is related to deficiencies in authentication mechanisms. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain increased privileges...

The vulnerabilities of NETGEAR Wi-Fi router microprogramming systems, such as AC2400, AC2600, D7000, R6020, R6080, R6120, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450, are related to authentication process flaws, which allow attackers to exploit these vulnerabilities to gain increased privileges.

The vulnerabilities of NETGEAR Wi-Fi router software models AC2400, AC2600, D7000, R6020, R6080, R6120, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450 are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can...

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in their authentication mechanisms’ flaws, which allow attackers to bypass security restrictions and gain increased privileges.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to deficiencies in authentication mechanisms. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain increased privileges...

Juniper Networks Junos OS 输入验证错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS has an input validation error vulnerability that can be exploited by an attacker to exploit...

The vulnerability of NETGEAR D7000 Wi-Fi routers’ microprogramming software, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of NETGEAR D7000 Wi-Fi routers’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

The vulnerability of the isolated programming environment AppContainer in Microsoft Windows operating systems allows attackers to circumvent security restrictions and gain increased privileges.

The vulnerability of the isolated programming environment AppContainer in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to circumvent security restrictions and enhance their privileges...

Business Logic Errors in dolibarr/dolibarr

Description The application does not check the input of price number lead to Business Logic error through negative price amount. Proof of Concept 1. Go to Product and Services area htdocs/product/index.php 2. Create a new or edit an item, insert a negative amount into Selling price field. Also in...

Google fixes multiple vulnerabilities in Chrome

THREAT LEVEL: Amber. For a detailed advisory, download the pdf file here. Google Chrome has been updated to version 97, which addresses 37 security flaws. Google has classed ten of them as High and one as Critical, while the remaining thirteen have been classified as Medium or Low. These flaws po...

BMC Community Track-It! 代码问题漏洞

BMC Community Track-It! is an It helpdesk software from BMC Community USA. It is used for help desks and helpdesks with asset management. A code issue vulnerability exists in BMC Community Track-It! that stems from the handling of email attachments that exist. The issue is caused due to a lack of...

Apache Kylin 权限许可和访问控制问题漏洞

Apache Kylin is an open source distributed analytic data warehouse from the Apache Foundation. The product mainly provides SQL query interface and multidimensional analysis OLAP on top of Hadoop/Spark. Apache Kylin is vulnerable to permission and access control issues, which stem from the fact th...

The vulnerability of SCADA systems with integrated web servers, related to deficiencies in authentication procedures, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of SCADA systems with integrated web servers relates to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

PT-2021-14762 · Zte · Zte Bigvideo

Name of the Vulnerable Software and Affected Versions: ZTE BigVideo analysis product affected versions not specified Description: The ZTE BigVideo analysis product has an input verification issue due to inconsistent front and back verifications when configuring the large screen page. An attacker...

ROS-2-1751

2.1751 Nettle library vulnerabilityCVE-2021-20305 1. Vulnerability Description: A vulnerability in the Nettle library involving the use of a failed cryptographic algorithm and allowing a remote attacker who has not been authenticated to execute arbitrary code.Identifier of the Information Securit...

Researchers Disclose Unpatched Vulnerabilities in Microsoft Teams Software

Microsoft said it won't be fixing or is pushing patches to a later date for three of the four security flaws uncovered in its Teams business communication platform earlier this March. The disclosure comes from Berlin-based cybersecurity firm Positive Security, which found that the implementation ...

Software flaws in walk-through metal detectors made them hackable

By Waqas Walk-through metal detectors manufactured by well-known U.S.-based firm Garett are vulnerable to remote attacks. This is a post from HackRead.com Read the original post: Software flaws in walk-through metal detectors made them hackable...

The vulnerability of the Crash Reporter component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows a hacker to modify any files they desire.

The vulnerability of the Crash Reporter component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to modify arbitrary files...

The vulnerability of the Security Server server in the Worry-Free Business Security antivirus protection tool allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the Security Server component in the Worry-Free Business Security antivirus solution is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

The vulnerability of the kernel of operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows attackers to gain increased privileges.

The vulnerability of the kernel in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the IBM QRadar SIEM system for event collection and analysis, related to authentication procedures that allow unauthorized access by attackers to protected information.

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Security Server server in the antivirus protection system Worry-Free Business Security allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the Security Server component of the antivirus protection system, Worry-Free Business Security, is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges and execute arbitrary code...