CVE-2023-29353

CVE-2023-29353 affects Sysinternals Process Monitor for Windows. The connected sources describe a Denial-of-Service vulnerability likely stemming from incorrect resource handling in Sysinternals/Process Monitor, with the impact explicitly stated as DoS and the CVSS indicating local access with us...

CVE-2023-29353 Sysinternals Process Monitor for Windows Denial of Service Vulnerability

...

Sysinternals Process Monitor for Windows Denial of Service Vulnerability

...

PT-2023-3220 · Microsoft · Sysinternals Process Monitor

Name of the Vulnerable Software and Affected Versions: Sysinternals Process Monitor for Windows affected versions not specified Description: The issue is related to incorrect resource release in the Sysinternals suite of system utilities for Windows operating systems. Exploitation of this issue m...

WordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File Upload

Software Download Monitor Type Plugin Vulnerable versions = 4.8.3 Fixed in 4.8.4 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2023-34007 Patch priority High CVSS severity High 9.9 Developer WPChill PSID f976c6a5bcd4 Credits Nguyen Anh Tien Required privilege Subscriber...

Microsoft SysInternals 安全漏洞

Microsoft SysInternals is a Microsoft company created in 1996 by Mark Russinovich to host his advanced system utilities and technical information. Whether you are an IT professional or a developer, you will find that Sysinternals utilities can help you manage, troubleshoot, and diagnose your...

fleischerei-monitor-werbung.de Cross Site Scripting vulnerability OBB-3406010

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-3153

A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit. This issue could allow an attacker to cause a denial of service, including on deployments with CoPP enabled and properly configured...

Open Virtual Network 安全漏洞

Open Virtual Network OVN is an Open Virtual Network open source. A security vulnerability exists in Open Virtual Network, which stems from the Service Monitor MAC not properly rate limiting. An attacker could exploit this vulnerability to cause a denial of service...

EulerOS Virtualization 2.11.1 : glibc (EulerOS-SA-2023-2069)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function...

Security Bulletin: tensorflow-2.7.3-cp37 vulnerable to CVE-2022-41911 CVE-2022-41907 CVE-2022-41908 CVE-2022-41896 CVE-2022-41891 CVE-2022-41894 CVE-2022-41884 IBM Maximo Application Suite - Monitor Component

Summary IBM Maximo Application Suite - Monitor Component uses tensorflow-2.7.3-cp37 vulnerable to CVE-2022-41911, CVE-2022-41907, CVE-2022-41908, CVE-2022-41896, CVE-2022-41891, CVE-2022-41894, CVE-2022-41884, CVE-2022-41898, CVE-2022-41888, CVE-2022-41897, CVE-2022-41880, CVE-2022-41889,...

The Importance of Managing Your Data Security Posture

Data security is reinventing itself. As new data security posture management solutions come to market, organizations are increasingly recognizing the opportunity to provide evidence-based security that proves how their data is being protected. But what exactly is data security posture, and how do...

EulerOS Virtualization 2.9.0 : glibc (EulerOS-SA-2023-2017)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function...

WordPress Download Monitor Plugin <= 4.8.1 is vulnerable to Server Side Request Forgery (SSRF)

Software Download Monitor Type Plugin Vulnerable versions = 4.8.1 Fixed in 4.8.2 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2023-31219 Patch priority Low CVSS severity Low 4.1 Developer WPChill PSID fb7b8d305714 Credits Mika Required privilege Administrator...

A Framework for Enhanced Security: Continuous Threat Exposure Management (CTEM)

If you're a cybersecurity professional, you're likely familiar with the sea of acronyms our industry is obsessed with. From CNAPP, to CWPP, to CIEM and all of the myriad others, there seems to be a new initialism born each day. In this article, we'll look at another trending acronym – CTEM, which...

CVE-2021-4336

A vulnerability was found in ITRS Group monitor-ninja up to 2021.11.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file modules/reports/models/scheduledreports.php. The manipulation leads to sql injection. Upgrading to version 2021.11.30 is able to...

CVE-2021-4336

A vulnerability was found in ITRS Group monitor-ninja up to 2021.11.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file modules/reports/models/scheduledreports.php. The manipulation leads to sql injection. Upgrading to version 2021.11.30 is able to...

Sql injection

A vulnerability was found in ITRS Group monitor-ninja up to 2021.11.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file modules/reports/models/scheduledreports.php. The manipulation leads to sql injection. Upgrading to version 2021.11.30 is able to...

CVE-2021-4336 ITRS Group monitor-ninja scheduled_reports.php sql injection

A vulnerability was found in ITRS Group monitor-ninja up to 2021.11.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file modules/reports/models/scheduledreports.php. The manipulation leads to sql injection. Upgrading to version 2021.11.30 is able to...

CVE-2021-4336

CVE-2021-4336 affects ITRS Group monitor-ninja (versions up to 2021.11.1). The vulnerability originates from an SQL injection flaw in the file modules/reports/models/scheduled_reports.php. The issue can potentially allow unauthorized data access or modification through the affected functionality;...