The vulnerability of the Windows operating system proxy server driver allows a hacker to execute arbitrary code.

The vulnerability of Windows operating system proxy server drivers is related to access control errors. Exploiting this vulnerability allows an attacker to execute arbitrary code by replacing the proxy server driver...

Researchers Discover LG Smart TV Vulnerabilities Allowing Root Access

Multiple security vulnerabilities have been disclosed in LG webOS running on its smart televisions that could be exploited to bypass authorization and gain root access on the devices. The findings come from Romanian cybersecurity firm Bitdefender, which discovered and reported the flaws in Novemb...

Ivanti Addresses Flaws Leading to DoS Attacks and Code Execution

...

The vulnerability of the microprogramming-based BIOS software on Server Board S1200RP, S1400FP, S1400SP, S1600JP, S2400BB, S2400EP, S2400SC, S2600CO, S2600CP, S2600GL, S2600GZ, S2600IP, W2600CR, S2600JF, S2600WP, S4600LH, S4600LT, S2600CW, S2600KP, S2600TP, and S2600WT boards is related to access control deficiencies, which allow attackers to increase their privileges.

The vulnerability of the microprogramming-based BIOS software on Server Board S1200RP, S1400FP, S1400SP, S1600JP, S2400BB, S2400EP, S2400SC, S2600CO, S2600CP, S2600GL, S2600GZ, S2600IP, W2600CR, S2600JF, S2600WP, S4600LH, S4600LT, S2600CW, S2600KP, S2600TP, and S1200BT is related to access contro...

The vulnerability of the cloud-based messaging and streaming transmission platform Apache Pulsar lies in its authentication procedures’ deficiencies, which allow attackers to alter arbitrary storage settings, TTL values, and download configurations.

The vulnerability of the cloud-based messaging and streaming transmission platform Apache Pulsar is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to alter arbitrary storage settings, TTL values, and download configurations...

The vulnerability of the control interface of the MyQ Print Server allows a hacker to execute arbitrary code.

The vulnerability of the MyQ Print Server’s management interface is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the mDNS gateway function in Cisco IOS XE wireless controller Catalyst Series 9800 allows a attacker to cause a service failure.

The vulnerability of the multicast DNS mDNS function in Cisco IOS XE wireless controller Catalyst Series 9800 devices is related to incomplete cleanup of temporary or auxiliary resources during the processing of mDNS requests. Exploiting this vulnerability allows a malicious actor to cause servic...

The vulnerability of Microsoft Edge browser on Android, related to access control deficiencies, allows attackers to circumvent existing security restrictions.

The vulnerability of Microsoft Edge browser on Android is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

Ivanti Rushes Patches for 4 New Flaws in Connect Secure and Policy Secure

Ivanti has released security updates to address four security flaws impacting Connect Secure and Policy Secure Gateways that could result in code execution and denial-of-service DoS. The list of flaws is as follows - CVE-2024-21894 CVSS score: 8.2 - A heap overflow vulnerability in the IPSec...

ROS-20240404-01

A vulnerability in the Grafana web-based data submission tool is related to authentication bypass via spoofing. Exploitation of the vulnerability could allow an attacker acting remotely to gain full access to a user's account A vulnerability in the Grafana monitoring and surveillance platform is...

The vulnerability of Intel microprogramming software, related to access control deficiencies, allows attackers to enhance their privileges.

The vulnerability of Intel microprogramming software is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the System Management Mode (SMM) implementation in Lenovo notebook software allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the System Management Mode SMM implementation in Lenovo notebook microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

HPESBHF04593 rev.6 - HPE ProLiant DL/DX/ML/SY/RL/XL/Edgeline Servers Using BIOS (PixieFail), Multiple Vulnerabilities

Potential Security Impact: Local: Unauthorized Access; Remote: Code Execution, Denial of Service DoS, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen11 - Prior to v1.4803-14-2024 HPE ProLiant DL110 Gen11 - Prior to v2.1603-01-2024 HPE ProLiant...

The vulnerability of the NetApp SnapCenter backup and recovery software’s software platform, related to authentication deficiencies, allows a perpetrator to alter the configuration of system logging settings.

The vulnerability of the NetApp SnapCenter backup and recovery software platform relates to authentication deficiencies. Exploiting this vulnerability allows a malicious actor to remotely alter the configuration of system logging settings...

Medium: kernel

Issue Overview: A flaw was found in the smb client in the Linux kernel. A potential out-of-bounds error was seen in the smb2parsecontexts function. Validate offsets and lengths before dereferencing create contexts in smb2parsecontexts. CVE-2023-52434 In the Linux kernel, the following vulnerabili...

USN-6707-4 linux-azure-6.5 vulnerabilities

Lonial Con discovered that the netfilter subsystem in the Linux kernel did not properly handle element deactivation in certain cases, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code...

Finland Blames Chinese Hacking Group APT31 for Parliament Cyber Attack

The Police of Finland aka Poliisi has formally accused a Chinese nation-state actor tracked as APT31 for orchestrating a cyber attack targeting the country's Parliament in 2020. The intrusion, per the authorities, is said to have occurred between fall 2020 and early 2021. The agency described the...

SUSE-SU-2024:1039-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-15050053 fixes several issues. The following security issues were fixed: - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unixstreamreadgenericon the socket that the SKB is queued...

The vulnerability of HP OfficeJet Pro printer’s microprogramming software, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of HP OfficeJet Pro printer’s microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Security Vulnerability in Saflok’s RFID-Based Keycard Locks

Its pretty devastating: Today, Ian Carroll, Lennert Wouters, and a team of other security researchers are revealing a hotel keycard hacking technique they call Unsaflok. The technique is a collection of security vulnerabilities that would allow a hacker to almost instantly open several models of...