13502 matches found
PT-2023-7521 · Sierra Wireless · Aleos
Name of the Vulnerable Software and Affected Versions: ALEOS versions 4.16 and earlier Description: The issue is related to the use of hardcoded credentials in the debugging mode of the ALEOS operating system for Sierra Wireless MP70, RV50x, RV55, LX40, LX60 ES450, GX450 wireless routers. When...
PT-2023-35949 · Git +1 · Ntopng
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Invalid-free. The crash state involves the Flow::Flow and GenericHash::cleanup functions. No informati...
CVE-2023-40235
An NTLM Hash Disclosure was discovered in ArchiMate Archi before 5.1.0. When parsing the XMLNS value of an ArchiMate project file, if the namespace does not match the expected ArchiMate URL, the parser will access the provided resource. If the provided resource is a UNC path pointing to a share...
CVE-2023-38245 Adobe Acrobat Reader DC ActiveX Control (AxAcroPDFLib.AxAcroPDF) src NTLMv2 SSO Hash Theft Vulnerability
Adobe Acrobat Reader versions 23.003.20244 and earlier and 20.005.30467 and earlier are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a...
CVE-2023-40235
An NTLM Hash Disclosure was discovered in ArchiMate Archi before 5.1.0. When parsing the XMLNS value of an ArchiMate project file, if the namespace does not match the expected ArchiMate URL, the parser will access the provided resource. If the provided resource is a UNC path pointing to a share...
CVE-2023-40235
An NTLM Hash Disclosure was discovered in ArchiMate Archi before 5.1.0. When parsing the XMLNS value of an ArchiMate project file, if the namespace does not match the expected ArchiMate URL, the parser will access the provided resource. If the provided resource is a UNC path pointing to a share...
PT-2023-27342 · Unknown · Archimate Archi
Name of the Vulnerable Software and Affected Versions: ArchiMate Archi versions prior to 5.1.0 Description: An NTLM Hash Disclosure issue was discovered. When parsing the XMLNS value of an ArchiMate project file, if the namespace does not match the expected ArchiMate URL, the parser will access t...
CVE-2023-39969
CVE-2023-39969 affects uthenticode, a cross-platform library for partial Authenticode verification. In version 1.0.9, the library hashed the entire file instead of hashing sections by virtual address, violating the Authenticode spec and enabling an attacker to modify binary code without altering ...
uthenticode Data Forgery Issue Vulnerability
Authenticode is Trail of Bits open source a small cross-platform library . Used to partially verify Authenticode digital signatures. A data forgery issue vulnerability exists in uthenticode version 1.0.9, which stems from a vulnerability that allows an attacker to modify code in a binary file...
Undesired Behavior
Overview Affected versions of this package are vulnerable to Undesired Behavior. It contains a dependency on the SponsorLink package, which runs an obfuscated closed-source executable at buildtime. That executable spawns OS processes and performs network requests, including transferring a...
kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege escalation
A use-after-free vulnerability was found in the traffic control index filter tcindex in the Linux kernel. The imperfect hash area can be updated while packets are traversing. This issue could allow a local attacker to cause a use-after-free problem, leading to privilege escalation...
kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege escalation
A use-after-free vulnerability was found in the traffic control index filter tcindex in the Linux kernel. The imperfect hash area can be updated while packets are traversing. This issue could allow a local attacker to cause a use-after-free problem, leading to privilege escalation...
Description of the security update for Visio 2016: March 12, 2024 (KB5002565)
None None...
Description of the security update for Publisher 2013: August 8, 2023 (KB5002391)
Description of the security update for Publisher 2013: August 8, 2023 KB5002391 Summary This security update for Microsoft Office provides defense-in-depth updates to help improve security-related features. To learn more about the vulnerability, see Microsoft advisory ADV230003. Note: To apply th...
Description of the security update for Office 2016: August 8, 2023 (KB5002465)
None None...
Description of the security update for Outlook 2016: August 8, 2023 (KB5002459)
None None...
Description of the security update for PowerPoint 2016: August 8, 2023 (KB4504720)
None None...
Description of the security update for SharePoint Server 2019 Language Pack: August 8, 2023 (KB5002422)
None None...
Description of the security update for Excel 2016: August 8, 2023 (KB5002463)
None None...
End of support for Office 2013
End of support for Office 2013 Support for Office 2013 ended on April 11, 2023 and there will be no extension and no extended security updates. All of your Office 2013 apps will continue to function. However, you could expose yourself to serious and potentially harmful security risks.Buy or try...