dutchinternetmarketing.com Cross Site Scripting vulnerability OBB-3914842

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

AZL-39927 CVE-2024-3652 affecting package libreswan for versions less than 4.14-2

The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts. IKEv2 connections are not affected...

DEBIAN-CVE-2024-3652

The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts. IKEv2 connections are not affected...

AZL-39919 CVE-2024-3652 affecting package libreswan for versions less than 4.15-1

The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts. IKEv2 connections are not affected...

Eventlet 安全漏洞

Eventlet is a concurrent networking library for Python. A security vulnerability exists in Eventlet versions prior to 0.35.2 that originated from allowing remote attackers to interfere with DNS name resolution by rapidly sending invalid packets from the expected IP address and source port...

VulnCheck KEV: CVE-2024-20767

Adobe ColdFusion contains an improper access control vulnerability that could allow an attacker to access or modify restricted files via an internet-exposed admin panel...

Nozomi Networks Guardian 安全漏洞

Nozomi Networks Guardian is an IoT device and software inspection system from Nozomi Networks, USA. A security vulnerability exists in Nozomi Networks Guardian that stems from improper validation of input to certain fields...

Vulnerabilities fixed in Microsoft Defender for IoT

Microsoft has fixed vulnerabilities in Defender for IoT. A malicious party can exploit the vulnerabilities to afford elevated permissions and execute arbitrary code with permissions of the process. Microsoft has made updates available that fix the described vulnerabilities described. We recommend...

CVE-2024-29054

Microsoft Defender for IoT Elevation of Privilege Vulnerability...

CVE-2024-29055

Microsoft Defender for IoT Elevation of Privilege Vulnerability...

CVE-2024-29053

Microsoft Defender for IoT Remote Code Execution Vulnerability...

CVE-2024-21324

Microsoft Defender for IoT Elevation of Privilege Vulnerability...

CVE-2024-21323

Microsoft Defender for IoT Remote Code Execution Vulnerability...

CVE-2024-21322

Microsoft Defender for IoT Remote Code Execution Vulnerability...

Researchers Discover LG Smart TV Vulnerabilities Allowing Root Access

Multiple security vulnerabilities have been disclosed in LG webOS running on its smart televisions that could be exploited to bypass authorization and gain root access on the devices. The findings come from Romanian cybersecurity firm Bitdefender, which discovered and reported the flaws in Novemb...

Microsoft Windows Internet Connection Sharing 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Internet Connection Sharing ICS. An attacker exploiting this vulnerability could remotely execute code. The following products and...

Microsoft Windows Internet Shortcut SmartScreen Bypass Vulnerability

This vulnerability allows remote attackers to bypass the SmartScreen security feature to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...

PT-2024-3200 · Microsoft · Defender For Iot

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for IoT affected versions not specified Description: The issue is related to inadequate access control in Microsoft Defender for IoT, which can be exploited by a remote attacker to elevate their privileges. Recommendations:...

Microsoft Defender 安全漏洞

Microsoft Defender for IoT is an asset discovery, vulnerability management and threat monitoring solution for IoT/OT environments. Microsoft Defender for IoT suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Defender 安全漏洞

Microsoft Defender for IoT is an asset discovery, vulnerability management and threat monitoring solution for IoT/OT environments. Microsoft Defender for IoT suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code on a system...