12046 matches found
Dell Multiple Products Backlink Vulnerability
Dell Security Management Server is a data security management solution.Dell Encryption is a data protection solution.Dell Endpoint Dell Endpoint Security Suite is a network security suite. A security vulnerability exists in Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Securi...
GHSA-3FX3-85R4-8J3W Microsoft Security Advisory CVE-2023-36558: .NET Security Feature Bypass Vulnerability
Microsoft Security Advisory CVE-2023-36558: .NET Security Feature Bypass Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core 6.0, ASP.NET Core 7.0 and, ASP.NET Core 8.0 RC2. This advisory also provides guidance...
GHSA-P2JH-95JG-2W55 Information Disclosure in typo3/cms-install tool
CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C 3.5 Problem The login screen of the standalone install tool discloses the full path of the transient data directory e.g. /var/www/html/var/transient/. This applies to composer-based scenarios only - “classic” non-composer...
Information Disclosure in typo3/cms-install tool
CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C 3.5 Problem The login screen of the standalone install tool discloses the full path of the transient data directory e.g. /var/www/html/var/transient/. This applies to composer-based scenarios only - “classic” non-composer...
CVE-2023-47126 Information Disclosure in Install Tool in typo3/cms-install
TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions the login screen of the standalone install tool discloses the full path of the transient data directory e.g. /var/www/html/var/transient/. This applies to composer-based scenarios only...
CVE-2023-47126 Information Disclosure in Install Tool in typo3/cms-install
TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions the login screen of the standalone install tool discloses the full path of the transient data directory e.g. /var/www/html/var/transient/. This applies to composer-based scenarios only...
CVE-2023-33878
Path transversal in some IntelR NUC P14E Laptop Element Audio Install Package software before version 156 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-33878
The CVE-2023-33878 issue affects Intel NUC P14E Laptop Element Audio Install Package for Windows (before version 156). Root cause: path traversal in the installer/software update flow could be exploited by an authenticated local user to escalate privileges. Impact as described: local escalation o...
PT-2023-24529
Name of the Vulnerable Software and Affected Versions IntelR NUC P14E Laptop Element Audio Install Package software versions prior to 156 for Windows Description The issue concerns path transversal in the IntelR NUC P14E Laptop Element Audio Install Package software, which may allow an...
CVE-2023-33878: DEPRECATED: Often Misused: Path Manipulation
Path transversal in some IntelR NUC P14E Laptop Element Audio Install Package software before version 156 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...
PT-2023-30329
Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 12.4.8 Description The login screen of the standalone install tool discloses the full path of the transient data directory. This issue applies to composer-based scenarios only, and "classic" non-composer installations a...
KLA61978 Multiple vulnerabilities in Microsoft Server Software
Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Exchange Server can be exploited...
CVE-2023-47126: Exposure of Sensitive Information to an Unauthorized Actor
TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions the login screen of the standalone install tool discloses the full path of the transient data directory e.g. /var/www/html/var/transient/. This applies to composer-based scenarios only...
Fedora: Security Advisory for radare2 (FEDORA-2023-ffaebb1e10)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
typo3 -- Multiple vulnerabilities
[email protected] reports: Weak Authentication in Session Handling in typo3/cms-core: In typo3 installations there are always at least two different sites. Eg. first.example.org and second.example.com. In affected versions a session cookie generated for the first site can be reused o...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in components of Azure. A malicious party could exploit the vulnerabilities to circumvent a security measure, execute arbitrary code with the victim's privileges or gain access to sensitive data. Azure:...
CVE-2023-5747 Command injection via wave install file
Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation of Wave on the camera device. The Wave server application in camera device was vulnerable to command injection allowing an attacker to run arbitrary code. HanwhaVision has releas...
Fedora: Security Advisory for xorg-x11-server-Xwayland (FEDORA-2023-18cb340b28)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2023-35501
Name of the Vulnerable Software and Affected Versions cabal-install versions prior to 3.10.2.0 Description A problem was discovered in cabal-install's implementation of the Hackage Security protocol, which could allow an attacker with a revoked private key and the ability to perform a...
