The vulnerability of the command-line interface of Cisco Aironet Access Point microprogramming software allows a attacker to access, modify, add, or delete data.

The vulnerability of the command-line interface of Cisco Aironet Access Point software relates to deficiencies in the system’s controlled area segmentation. Exploiting this vulnerability could allow an attacker to access, modify, add, or delete data...

The vulnerability of the salt-netapi component in the Configuration Management system and remote execution of Salt operations, due to insufficient input data validation, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the salt-netapi component in the Configuration Management system and remote Salt execution operations is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and...

The vulnerability of NETGEAR Orbi Wi-Fi systems’ microprogramming software, related to authentication flaws, allows attackers to trigger a service failure.

The vulnerability of NETGEAR Orbi Wi-Fi systems’ microprogramming software is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of NETGEAR Orbi Wi-Fi systems’ microprogramming software, related to authentication flaws, allows attackers to trigger a service failure.

The vulnerability of NETGEAR Orbi Wi-Fi systems’ microprogramming software is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Citrix XenMobile Server, a system for managing corporate mobile devices, stems from deficiencies in the authentication mechanism. This allows unauthorized users to gain access to protected information.

The vulnerability of the Citrix XenMobile Server, a system for managing corporate mobile devices, is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Windows Event Tracing service allows attackers to escalate their privileges.

The vulnerability of the Windows Event Tracing service is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Visual Studio Code’s source editor, related to deficiencies in access control, allows attackers to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Network Address Translation (NAT) technology implementation in Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Network Address Translation NAT technology implementation in Windows operating systems is related to security flaws in service data protection. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the Google Chrome browser’s media component, which allows a hacker to access confidential data

The vulnerability of the Google Chrome browser’s media component is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

The vulnerability of Squid’s request headers, related to HTTP request processing flaws, allows attackers to compromise data integrity.

The vulnerability of Squid proxy server requests is related to a lack of proper interpretation of HTTP requests. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

The vulnerability of the Windows operating system, related to insecure management of privileges, allows a perpetrator to elevate their privileges.

The vulnerability of the DirectX component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Windows operating system, related to insecure management of privileges, allows a perpetrator to elevate their privileges.

The vulnerability of the Update Stack Setup component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the IBM Security Verify Bridge software, related to deficiencies in the cryptographic algorithms used, allows a perpetrator to disclose protected information.

The vulnerability of the IBM Security Verify Bridge software is related to deficiencies in the cryptographic algorithms used. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the Windows Print Spooler component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows Print Spooler component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to lack of access control mechanisms. This allows attackers to enhance their privileges.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to lack of access control mechanisms. Exploiting these vulnerabilities can allow a malicious actor to enhance their...

SSL/TLS: Deprecated TLSv1.0 and TLSv1.1 Protocol Detection

It was possible to detect the usage of the deprecated TLSv1.0 and/or TLSv1.1 protocol on this system. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Active Exploits Hit WordPress Sites Vulnerable to Thrive Themes Flaws

Attackers are actively exploiting two recently-patched vulnerabilities in a popular suite of tools for WordPress websites from marketing platform Thrive Themes. Thrive Themes offers various products to help WordPress websites “convert visitors into leads and customers.” Its suite of products,...

Cisco IOS XE SD-WAN Software 注入漏洞

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. An arbitrary command execution vulnerability exists in the CLI for SD-WAN in Cisco IOS XE. The vulnerability stems from insufficient validation of user-supplied input. An attacker...

MangaDex Site Offline Following Hacking Incident

MangaDex, the online repository of manga animation comics, will be closed until further notice following a hacking incident. Last week, the site reported that a cyberattacker had gained access to an administrative account, “through the reuse of a session token found in an old database leak throug...

CISA Warns of Security Flaws in GE Power Management Devices

The U.S. Cybersecurity & Infrastructure Security Agency CISA is warning of critical-severity security flaws in GE’s Universal Relay UR family of power management devices. GE’s UR devices are the “basis of simplified power management for the protection of critical assets,” according to the company...