3180 matches found
Description of the security update for Office 2013: July 11, 2023 (KB5001952)
Description of the security update for Office 2013: July 11, 2023 KB5001952 Summary This security update resolves a Microsoft Office graphics remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2023-33149. Note: To app...
GO-2023-1821 The x/crisis package does not cause chain halt in github.com/cosmos/cosmos-sdk
If an invariant check fails on a Cosmos SDK network, and a transaction is sent to the x/crisis package to halt the chain, the chain does not halt as originally intended. No patch will be released, as the package is planned to be deprecated and replaced...
CVE-2023-29147
In Malwarebytes EDR 1.0.11 for Linux, it is possible to bypass the detection layers that depend on inode identifiers, because an identifier may be reused when a file is replaced, and because two files on different filesystems can have the same identifier...
CVE-2023-29147
In Malwarebytes EDR 1.0.11 for Linux, it is possible to bypass the detection layers that depend on inode identifiers, because an identifier may be reused when a file is replaced, and because two files on different filesystems can have the same identifier...
PT-2023-22170 · Malwarebytes · Malwarebytes Edr
Name of the Vulnerable Software and Affected Versions: Malwarebytes EDR version 1.0.11 Description: The issue allows bypassing detection layers that rely on inode identifiers. This is possible because an identifier may be reused when a file is replaced, and two files on different filesystems can...
The vulnerabilities in the configuration of FortiClient installer distributions and the FortiConverter migration service allow a hacker to replace files in the software installation directory.
The vulnerability of the Fortinet FortiClient installer and the FortiConverter configuration and policy transfer tool is related to errors in the use of standard permissions. Exploiting this vulnerability could allow an attacker to replace files in the software installation directory...
Barracuda Email Security Gateway < 9.2.0.008 Command Injection (CVE-2023-2868)
According to its self-reported version, the Barracuda Email Security Gateway on the remote web server is 9.2.0.008. It is, therefore, affected by a command injection vulnerability in the processing of .tar files that could allow a remote, unauthenticated attacker to execute arbitrary commands wit...
CVE-2023-2819
A stored cross-site scripting vulnerability in the Sources UI in Proofpoint Threat Response/ Threat Response Auto Pull PTR/TRAP could allow an authenticated administrator on an adjacent network to replace the image file with an arbitrary MIME type. This could result in arbitrary javascript code...
CVE-2023-28600
Zoom for MacOSclients prior to 5.14.0 contain an improper access control vulnerability. A malicious user may be able to delete/replace Zoom Client files potentially causing a loss of integrity and availability to the Zoom Client...
Description of the security update for Outlook 2013: June 13, 2023 (KB5002382)
Description of the security update for Outlook 2013: June 13, 2023 KB5002382 Summary This security update resolves a Microsoft Outlook remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2023-33131. Note: To apply this...
Zoom Client 安全漏洞
Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom for MacOS clients versions prior to 5.14.0 that stems from improper access control. An attacker exploiting this vulnerability could delete or replace Zoom...
Barracuda Urges Replacing — Not Patching — Its Email Security Gateways
Its not often that a zero-day vulnerability causes a network security vendor to urge customers to physically remove and decommission an entire line of affected hardware -- as opposed to just applying software updates. But experts say that is exactly what transpired this week with Barracuda...
CVE-2023-2868: Total Compromise of Physical Barracuda ESG Appliances
Rapid7 incident response teams are investigating exploitation of physical Barracuda Networks Email Security Gateway ESG appliances dating back to at least November 2022. As of June 6, 2023, as part of an ongoing product incident response, Barracuda is urging ESG customers to immediately...
Barracuda Urges Immediate Replacement of Hacked ESG Appliances
Enterprise security company Barracuda is now urging customers who were impacted by a recently disclosed zero-day flaw in its Email Security Gateway ESG appliances to immediately replace them. "Impacted ESG appliances must be immediately replaced regardless of patch version level," the company sai...
Barracuda Urges Immediate Replacement of Hacked ESG Appliances
Enterprise security company Barracuda is now urging customers who were impacted by a recently disclosed zero-day flaw in its Email Security Gateway ESG appliances to immediately replace them. "Impacted ESG appliances must be immediately replaced regardless of patch version level," the company sai...
CVE-2023-34104
fast-xml-parser is an open source, pure javascript xml parser. fast-xml-parser allows special characters in entity names, which are not escaped or sanitized. Since the entity name is used for creating a regex for searching and replacing entities in the XML body, an attacker can abuse it for denia...
CVE-2023-24568
Dell NetWorker, contains an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port which could disallow replacing CA signed certificates...
PT-2023-19687 · Dell · Dell Networker
Name of the Vulnerable Software and Affected Versions: Dell NetWorker affected versions not specified Description: The issue is related to an Improper Validation of Certificate with Host Mismatch vulnerability in the Rabbitmq port. This could disallow replacing CA signed certificates...
pcs security update
0.10.15-4.0.1.el88.1 - Replace HAM-logo.png with a generic one 0.10.15-4.el88.1 - Fix displaying differences between configuration checkpoints in pcs config checkpoint diff command - Fix pcs stonith update-scsi-devices command which was broken since Pacemaker-2.1.5-rc1 - Updated bundled rubygem...