The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems, PHOENIX CONTACT WP 6xxx, is related to deficiencies in authentication procedures, allowing unauthorized individuals to gain unauthorized access to the device.

The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems, such as PHOENIX CONTACT WP 6xxx, is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

The vulnerability of microprogramming software in web panels for managing and monitoring processes in industrial systems, PHOENIX CONTACT WP 6xxx, is related to deficiencies in authentication procedures. This allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of microprogramming software in web panels for managing and monitoring processes in industrial systems, such as PHOENIX CONTACT WP 6xxx, is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to compromise the integri...

SUSE-SU-2023:3406-1 Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 8 Fix Pack 10 bsc1213541 - CVE-2022-40609: Fixed an unsafe deserialization flaw which could allow a remote attacker to execute arbitrary code on the system. bsc1213934 - CVE-2023-22041: Fixed a flaw whci...

The vulnerability of the Intel PROSet/Wireless WiFi and Killer Wi-Fi connection tools, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the Intel PROSet/Wireless WiFi and Killer WiFi networking tools is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the SED software “DELO” stems from deficiencies in the authentication process, allowing a perpetrator to intercept the identifier and bypass the authentication mechanism.

The vulnerability of the SED software “DELO” is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to intercept the identifier and bypass the authentication mechanism...

CVE-2023-37438

Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and...

Important: kernel-livepatch-5.10.179-166.674

Issue Overview: A flaw was found in the Linux kernel's networking subsystem within the RPL protocol's handling. This issue results from the improper handling of user-supplied data, which can lead to an assertion failure. This flaw allows an unauthenticated, remote attacker to create a denial of...

The vulnerability of the Cloud Files Mini Filter driver for the Windows operating system allows a hacker to increase their privileges.

The vulnerability of the Cloud Files Mini Filter driver for the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2023-20205

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager EPNM could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device...

CVE-2023-20017

Multiple vulnerabilities in Cisco Intersight Private Virtual Appliance could allow an authenticated, remote attacker to execute arbitrary commands using root-level privileges. The attacker would need to have Administrator privileges on the affected device to exploit these vulnerabilities. These...

Critical Security Flaws Affect Ivanti Avalanche, Threatening 30,000 Organizations

Multiple critical security flaws have been reported in Ivanti Avalanche, an enterprise mobile device management solution that's used by 30,000 organizations. The vulnerabilities, collectively tracked as CVE-2023-32560 CVSS score: 9.8, are stack-based buffer overflows in Ivanti Avalanche...

DEBIAN-CVE-2023-39950

efibootguard is a simple UEFI boot loader with support for safely switching between current and updated partition sets. Insufficient or missing validation and sanitization of input from untrustworthy bootloader environment files can cause crashes and probably also code injections into bgsetenv or...

macOS Ventura Background Task Flaws Can Be Exploited for Malware

By Habiba Rashid Renowned Mac security researcher Patrick Wardle recently unveiled potential weaknesses within Apples macOS Ventura, shedding light on vulnerabilities… This is a post from HackRead.com Read the original post: macOS Ventura Background Task Flaws Can Be Exploited for Malware...

USN-6286-1 intel-microcode vulnerabilities

Daniel Moghimi discovered that some IntelR Processors did not properly clear microarchitectural state after speculative execution of various instructions. A local unprivileged user could use this to obtain to sensitive information. CVE-2022-40982 It was discovered that some IntelR XeonR Processor...

An Apple Malware-Flagging Tool Is ‘Trivially’ Easy to Bypass

The macOS Background Task Manager tool is supposed to spot potentially malicious software on your machine. But a researcher says it has troubling flaws...

PT-2023-14609 · Intel · Intel Vroc

Name of the Vulnerable Software and Affected Versions: IntelR VROC software versions prior to 8.0.0.4035 Description: The issue is related to improper access control in IntelR VROC software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

The vulnerability of the PackageKit component in the macOS operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of PackageKit component in the macOS operating system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Microsoft’s August Patch Tuesday Addresses Active Zero-Day Exploits

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary In the August Patch Tuesday release, Microsoft addressed a total of 73 CVEs, encompassing six critical and 67 important vulnerabilities. Within this range of vulnerabilities, the security update...

Encryption Flaws in Popular Chinese Language App Put Users' Typed Data at Risk

A widely used Chinese language input app for Windows and Android has been found vulnerable to serious security flaws that could allow a malicious interloper to decipher the text typed by users. The findings from the University of Toronto's Citizen Lab, which carried out an analysis of the...

Microsoft Releases Patches for 74 New Vulnerabilities in August Update

Microsoft has patched a total of 74 flaws in its software as part of the company's Patch Tuesday updates for August 2023, down from the voluminous 132 vulnerabilities the company fixed last month. This comprises six Critical, 67 Important, and one Moderate severity vulnerabilities. Released along...