4346 matches found
Microsoft and Adobe Patch Tuesday, June 2023 Security Update Review
Microsoft has released Junes edition of Patch Tuesday! This installment of security updates addressed 94 security vulnerabilities in various products, features, and roles. Microsoft Patch Tuesday for June 2023 No zero-day vulnerabilities known to be exploited in the wild have been fixed in this...
Security feature bypass
An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security...
Security feature bypass
DISPUTED An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages are displayed. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."...
Windows Server Service Security Feature Bypass Vulnerability
...
Windows SMB Witness Service Security Feature Bypass Vulnerability
...
APSB23-35 : Security update available for Adobe Commerce
Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical, important and moderate vulnerabilities. Successful exploitation could lead to arbitrary code execution, security feature bypass and arbitrary file system read...
PT-2023-3179 · Adobe · Commerce
Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.6 and earlier Adobe Commerce versions 2.4.5-p2 and earlier Adobe Commerce versions 2.4.4-p3 and earlier Description: The issue is related to an Incorrect Authorization vulnerability that could result in a security...
APSB23-31 : Security update available for Adobe Experience Manager
Adobe has released updates for Adobe Experience Manager AEM. These updates resolve vulnerabilities rated important and moderate in Adobe Experience Manager including third party dependencies. Successful exploitation of these vulnerabilities could result in arbitrary code execution, denial of...
CVE-2023-29345
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...
CVE-2023-29345
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...
Security feature bypass
A duplicate SystemPrincipal object could be created when parsing a non-system html document via DOMParser::ParseFromSafeString. This could have lead to bypassing web security checks. This vulnerability affects Firefox 109...
PT-2023-3114 · Microsoft · Edge
Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to a security feature bypass in Microsoft Edge, where an attacker can exploit it to bypass security restrictions and perform cross-site scripting...
Microsoft Edge 跨站脚本漏洞
Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge that stems from the presence of a security feature bypass vulnerability...
Microsoft Patch Tuesday May 2023: Microsoft Edge, BlackLotus Secure Boot SFB, OLE RCE, Win32k EoP, NFS RCE, PGM RCE, LDAP RCE, SharePoint RCE
Microsoft Patch Tuesday May 2023: Microsoft Edge, BlackLotus Secure Boot SFB, OLE RCE, Win32k EoP, NFS RCE, PGM RCE, LDAP RCE, SharePoint RCE. Hello everyone! This episode will be about Microsoft Patch Tuesday for May 2023, including vulnerabilities that were added between April and May Patch...
Oracle Linux 9 : krb5 (ELSA-2023-2570)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2570 advisory. - Add support for MS-PAC extended KDC signature CVE-2022-37967 - Fix integer overflows in PAC parsing CVE-2022-42898 - Fix KDC null deref on TGS inner body null...
GitHub Extends Push Protection to Prevent Accidental Leaks of Keys and Other Secrets
GitHub has announced the general availability of a new security feature called push protection, which aims to prevent developers from inadvertently leaking keys and other secrets in their code. The Microsoft-owned cloud-based repository hosting platform, which began testing the feature a year ago...
Microsoft Edge (Chromium) < 113.0.1774.35 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 113.0.1774.35. It is, therefore, affected by multiple vulnerabilities as referenced in the May 5, 2023 advisory. - Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attack...
Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (May 2023)
This host is missing a critical security update according to Microsoft Office Click-to-Run update May 2023 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Microsoft and Adobe Patch Tuesday, May 2023 Security Update Review
Microsoft has addressed 49 vulnerabilities in its May Patch Tuesday edition. The security advisories cover various vulnerabilities in different products, features, and roles. Lets guide you through this months Patch Tuesday details. Microsoft Patch Tuesday for May 2023 Microsoft has also addresse...