5433 matches found
USN-6742-1: Linux kernel vulnerabilities
Daniele Antonioli discovered that the Secure Simple Pairing and Secure Connections pairing in the Bluetooth protocol could allow an unauthenticated user to complete authentication without pairing credentials. A physically proximate attacker placed between two Bluetooth devices could use this to...
The vulnerability of the threat detection mechanism for Microsoft Defender for IoT involves an incorrect path name limitation, allowing attackers to execute arbitrary code.
The vulnerability of the Microsoft Defender for IoT’s threat detection mechanism is related to an incorrect path name limitation when loading tar-format files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Ubuntu: Security Advisory (USN-6726-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-6726-2: Linux kernel (IoT) vulnerabilities
Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly handle zero length data request, leading to a null pointer dereference vulnerability. An attacker in a guest VM could possibly use this to cause a denial of service host domain crash...
The vulnerability of the Microsoft Defender for IoT’s threat detection mechanism lies in the lack of measures to neutralize special elements used in the operating system’s command set, allowing attackers to execute arbitrary code.
The vulnerability of the Microsoft Defender for IoT threat detection mechanism is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
IBM Security verify Access Appliance Security Vulnerability
IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated acce...
Microsoft Defender for IoT Remote Code Execution Vulnerability (CNVD-2024-19329)
Microsoft Defender for IoT is an asset discovery, vulnerability management and threat monitoring solution for IoT/OT environments. Microsoft Defender for IoT suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code on a system...
Microsoft Defender for IoT elevation of privilege vulnerability (CNVD-2024-19331)
Microsoft Defender for IoT is an asset discovery, vulnerability management and threat monitoring solution for IoT/OT environments. An elevation of privilege vulnerability exists in Microsoft Defender for IoT, which can be exploited by an attacker to escalate privileges...
Microsoft Defender for IoT Remote Code Execution Vulnerability (CNVD-2024-19328)
Microsoft Defender for IoT is an asset discovery, vulnerability management and threat monitoring solution for IoT/OT environments. Microsoft Defender for IoT suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code on a system...
Microsoft Defender for IoT elevation of privilege vulnerability (CNVD-2024-19330)
Microsoft Defender for IoT is an asset discovery, vulnerability management and threat monitoring solution for IoT/OT environments. An elevation of privilege vulnerability exists in Microsoft Defender for IoT, which can be exploited by an attacker to escalate privileges...
Vulnerability in some TP-Link routers could lead to factory reset
Cisco Talos Vulnerability Research team has disclosed 10 vulnerabilities over the past three weeks, including four in a line of TP-Link routers, one of which could allow an attacker to reset the devices settings back to the factory default. A popular open-source software for internet-of-things Io...
Patch Tuesday - April 2024
Microsoft is addressing 149 vulnerabilities this April 2024 Patch Tuesday, which is significantly more than usual. For the second month in a row, Microsoft indicated that they weren't aware of prior public disclosure or exploitation in the wild for any of the vulnerabilities patched today. Howeve...
Patch Tuesday - April 2024
Microsoft is addressing 149 vulnerabilities this April 2024 Patch Tuesday, which is significantly more than usual. For the second month in a row, Microsoft indicated that they weren't aware of prior public disclosure or exploitation in the wild for any of the vulnerabilities patched today. Howeve...
Microsoft and Adobe Patch Tuesday, April 2024 Security Update Review
Welcome to another insightful dive into Microsofts Patch Tuesday! This months security updates address a vast number of vulnerabilities in multiple popular products, features, and roles. We invite you to join us to review and discuss the details of these security updates and patches. Microsoft...
CVE-2024-29054
Microsoft Defender for IoT Elevation of Privilege Vulnerability...
CVE-2024-29055
Microsoft Defender for IoT Elevation of Privilege Vulnerability...
CVE-2024-29053
Microsoft Defender for IoT Remote Code Execution Vulnerability...
CVE-2024-21323
Microsoft Defender for IoT Remote Code Execution Vulnerability...