CVE-2023-27791

An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecure PRNG...

CVE-2023-27791

An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecure PRNG...

CVE-2023-27792

CVE-2023-27792 affects IXP Data Easy Install v6.6.14884.0. The issue is privilege escalation caused by improper permission handling on subdirectories, enabling a local attacker to achieve high integrity/confidentiality/availability impact as per CVSS v3.1 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Pu...

CVE-2023-27791

CVE-2023-27791 affects IXP Data Easy Install v6.6.148840. The issue is a root-cause in the product’s PRNG that enables a remote attacker to escalate privileges. Connected sources confirm the vulnerability and its impact as privilege escalation; no explicit exploit details are provided, and there ...

CVE-2023-27793

CVE-2023-27793 affects IXP Data Easy Install, version 6.6.14884.0. The connected sources describe a local privilege escalation caused by weak encoding of sensitive information within the software. The NVD entry lists a high-severity score (CVSS 3.1: 7.8; LOCAL access, LOW privileges, no user inte...

CVE-2023-27795

An issue found in IXP Data Easy Install v.6.6.14884.0 allows a local attacker to gain privileges via a static XOR key...

CVE-2023-27795

An issue found in IXP Data Easy Install v.6.6.14884.0 allows a local attacker to gain privileges via a static XOR key...

CVE-2023-27793

An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain escalated privileges via weak encoding of sensitive information...

PT-2023-21346 · Unknown · Ixp Data Easy Install

Name of the Vulnerable Software and Affected Versions: IXP Data Easy Install version 6.6.148840 Description: An issue in IXP Data Easy Install allows a remote attacker to escalate privileges via an insecure Pseudo-Random Number Generator PRNG. Recommendations: For IXP Data Easy Install version...

CVE-2023-27795

The CVE concerns IXP Data Easy Install, version 6.6.14884.0. The issue allows a local attacker to escalate privileges by abusing a static XOR key in the affected software, with impact described as high confidentiality, integrity, and availability concerns per the NVD entry (CVSS v3.1: Local, Priv...

CVE-2023-27792

An issue found in IXP Data Easy Install v.6.6.14884.0 allows an attacker to escalate privileges via lack of permissions applied to sub directories...

CVE-2023-27792

An issue found in IXP Data Easy Install v.6.6.14884.0 allows an attacker to escalate privileges via lack of permissions applied to sub directories...

PT-2023-21348 · Unknown · Ixp Data Easy Install

Name of the Vulnerable Software and Affected Versions: IXP Data Easy Install version 6.6.14884.0 Description: An issue in IXP Data Easy Install allows local attackers to gain escalated privileges via weak encoding of sensitive information. Recommendations: For version 6.6.14884.0, consider...

CVE-2023-27793

An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain escalated privileges via weak encoding of sensitive information...

CVE-2023-45148 Rate limiter not working reliable when Memcached is installed in Nextcloud

Nextcloud is an open source home cloud server. When Memcached is used as memcache.distributed the rate limiting in Nextcloud Server could be reset unexpectedly resetting the rate count earlier than intended. Users are advised to upgrade to versions 25.0.11, 26.0.6 or 27.1.0. Users unable to upgra...

Malicious Package

Overview ZendeskApi.Client.V2 is a malicious package. This package contains malicious code that executes covert scripts upon installation or uninstallation, communicating with a remote server to download and execute additional malicious files, thereby deploying the SeroXen RAT on the victim's...

Malicious Package

Overview Pathoschild.Stardew.Mod.BuildConfig is a malicious package. This package contains malicious code that executes covert scripts upon installation or uninstallation, communicating with a remote server to download and execute additional malicious files, thereby deploying the SeroXen RAT on t...

Security Bulletin: Vulnerability in iText affects IBM Process Mining . CVE-2022-24197

Summary There is a vulnerability in iText that could allow a remote attacker to execute a denial of service. The code is used by IBM Process Mining. This bulletin identifies the security fixes to apply to address the vulnerability. Vulnerability Details CVEID:CVE-2022-24197 DESCRIPTION: iText is...

Fedora: Security Advisory for xrdp (FEDORA-2023-c026222382)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KLA61135 DoS vulnerability in Microsoft Browser

Type confusion vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2023-5346 Related products Microsoft-Edge CVE list CVE-2023-5346 critical KB list Solution Install necessary updates from the Settings an...