CVE-2023-40352

McAfee Safe Connect before 2.16.1.126 may allow an adversary with system privileges to achieve privilege escalation by loading arbitrary DLLs...

CVE-2023-40352

McAfee Safe Connect VPN is impacted by CVE-2023-40352 in versions prior to 2.16.1.126. The issue is a local privilege escalation via loading arbitrary DLLs caused by an uncontrolled search path element. Public sources describe the root cause as related to DLL loading configurations (one advisory ...

McAfee Safe Connect code-related vulnerabilities

McAfee Safe Connect is a virtual private network VPN product from McAfee, Inc. A security vulnerability exists in McAfee Safe Connect versions prior to 2.16.1.126, which originated from a vulnerability that could allow an attacker with system privileges to escalate privileges by loading an...

PT-2023-4542 · Mcafee · Mcafee Safe Connect

Name of the Vulnerable Software and Affected Versions: McAfee Safe Connect versions prior to 2.16.1.126 Description: The issue is related to an uncontrolled search path element, which may allow an adversary with system privileges to achieve privilege escalation by loading arbitrary DLLs. This can...

CVE-2023-2737

Improper log permissions in SafeNet Authentication Service Version 3.4.0 on Windows allows an authenticated attacker to cause a denial of service via local privilege escalation...

Beware malware posing as beta versions of legitimate apps, warns FBI

The FBI has issued a warning that cybercriminals are embedding malicious code in mobile beta-testing apps in attempts to defraud potential victims. The victims are typically contacted on dating sites and social media, and in some cases they are promised incentives such as large financial payouts...

CVE-2023-39341

"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service DoS condition. Affected products and versions are as follows: FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0, FFRI yarai Home and Business Editio...

CVE-2023-39341: Improper Handling of Exceptional Conditions

"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service DoS condition. Affected products and versions are as follows: FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0, FFRI yarai Home and Business Editio...

PT-2023-26888

Name of the Vulnerable Software and Affected Versions FFRI yarai versions 3.4.0 through 3.5.0 FFRI yarai Home and Business Edition version 1.4.0 InfoTrace Mark II Malware Protection Mark II Zerona versions 3.0.1 through 3.2.2 Zerona / Zerona PLUS versions 3.2.32 through 3.2.36 ActSecure χ version...

Tenda F1202 Buffer Error Vulnerability

Tenda F1202 is a dual-band Wi-Fi router with fifth-generation technology from Tenda, China. A security vulnerability exists in the Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5, and FH1202 V1.2.0.9 versions, which originates from a stack overflow vulnerability in the page parameter of the...

Foreman: Arbitrary code execution through templates

An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system...

CVE-2023-32001

Rejected reason: We issued this CVE pre-maturely, as we have subsequently realized that this issue points out a problem that there really is no safe measures around or protections for...

Design/Logic Flaw

Rejected reason: We issued this CVE pre-maturely, as we have subsequently realized that this issue points out a problem that there really is no safe measures around or protections for...

CVE-2023-32001

CVE-2023-32001 is corroborated by connected records as affecting curl in multiple packages. Specifically, CVE-2023-32001 targets curl versions below 8.2.1-1 (e.g., CBLMARINER entries for curl

machine learning lifecycle management platform Validate Path Disclosure

The vulnerability of the validatepathissafe function in the machine learning model lifecycle management platform exists due to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to disclose sensitive informatio...

SUSE CVE-2023-32001

We issued this CVE pre-maturely, as we have subsequently realized that this issue points out a problem that there really is no safe measures around or protections for...

WordPress WP Security Safe Plugin <= 2.5.1 is vulnerable to Cross Site Scripting (XSS)

Software WP Security Safe Type Plugin Vulnerable versions = 2.5.1 Fixed in 2.5.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 65de9592a0f7 Credits Rafie Muhammad Patchstack...

PT-2023-26082 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version V1.0BR V1.2.0.20408 Tenda FH1202 version V1.2.0.19 EN Description: A stack overflow was discovered in the page parameter in the fromSafeMacFilter function. This issue affects the specified versions of Tenda F1202 and FH120...

Tenda F1202 Buffer Error Vulnerability

The Tenda F1202 is a dual-band Wi-Fi router with fifth-generation technology from Tenda China. A security vulnerability exists in the Tenda F1202 prior to version V1.0BRV1.2.0.20, which stems from a buffer overflow on the page page of the fromSafeMacFilter method...

Tenda F1202 Buffer Error Vulnerability

The Tenda F1202 is a dual-band Wi-Fi router with fifth-generation technology from Tenda China. A security vulnerability exists in the Tenda F1202 prior to version V1.0BRV1.2.0.20, which stems from a buffer overflow on the page page of the fromSafeClientFilter method...