861 matches found
PT-2024-2748
Name of the Vulnerable Software and Affected Versions HP Workstation PCs affected versions not specified Description A potential security issue has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of privilege, arbitrary code execution, or denial of...
PT-2024-1726 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to bypass security restrictions. This can potentially enable an attacker to affect the system. Recommendations: At...
Microsoft is named a Leader in the 2023 Gartner® Magic Quadrant™ for Endpoint Protection Platforms
It’s no secret that ransomware is top of mind for many chief information security officers CISOs as the number of attacks has increased exponentially. As seen in the latest Microsoft Digital Defense Report, our “telemetry indicates that organizations faced an increased rate of ransomware attacks...
CVE-2024-22197
Nginx-ui is online statistics for Server Indicators Monitor CPU usage, memory usage, load average, and disk usage in real-time. The Home Preference page exposes a small list of nginx settings such as Nginx Access Log Path and Nginx Error Log Path. However, the API also exposes testconfigcmd,...
PT-2024-1118
Name of the Vulnerable Software and Affected Versions .NET, .NET Framework, and Visual Studio versions prior to the fixed version Description A security-feature bypass issue affects .NET, .NET Framework, and Visual Studio, allowing remote attackers to bypass existing security restrictions. This...
PT-2024-1053
Name of the Vulnerable Software and Affected Versions Microsoft.Data.SqlClient and System.Data.SqlClient affected versions not specified Description A security-feature bypass vulnerability in the Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider allows attackers to affect the...
Zebra ZTC Industrial ZT400 and ZTC Desktop GK420d
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.4 ATTENTION : Exploitable with adjacent access/low attack complexity Vendor : Zebra Technologies Equipment : ZTC Industrial ZT410, ZTC Desktop GK420d Vulnerability : Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION Successful...
The vulnerability of the SmartScreen security component, which prevents unauthorized access and malicious programs from being executed on Windows operating systems, allows attackers to circumvent security restrictions.
The vulnerability of the SmartScreen security component against phishing and malicious programs in Windows operating systems is related to errors in security settings. Exploiting this vulnerability can allow a remote attacker to circumvent security restrictions by opening a specially created...
PT-2023-6967
Name of the Vulnerable Software and Affected Versions ASP.NET affected versions not specified Description The issue is related to errors in security settings of the Microsoft .NET Framework platform. It allows a remote attacker to access a closed part of a web application by sending a specially...
PT-2023-7217 · Microsoft +7 · Asp.Net Core +7
Name of the Vulnerable Software and Affected Versions: ASP.NET Core affected versions not specified Description: The issue is related to errors in security settings of the ASP.NET Core platform, allowing an attacker to disclose protected information. Recommendations: At the moment, there is no...
PT-2023-8356 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.1 Description: The issue is related to errors in security settings of the Emoji component in the macOS operating system. An attacker may be able to execute arbitrary code as root from the Lock Screen. This is achiev...
WPS Server Side Request Forgery vulnerability
Summary The OGC Web Processing Service WPS specification is designed to process information from any server using GET and POST requests. This presents the opportunity for Server Side Request Forgery. Details This vulnerability requires: The WPS extension to be installed The WPS security setting...
PT-2023-6063 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass vulnerability in the Mark of the Web MOTW mechanism of Windows operating systems. This vulnerability is caused by errors in security...
CVE-2023-30727
Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi without User Interaction...
SAMSUNG Mobile devices security vulnerability
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices SMR Oct-2023 Release 1 version, which stems from an improper access control vulnerability in SecSettings...
CVE-2023-34034
A flaw was found in Spring Security's WebFlux framework pattern matching, where it does not properly evaluate certain patterns. A server using path-based pattern matching in WebFlux could allow an attacker to bypass security settings for some request paths, potentially leading to information...
Amazon Linux 2 : libreoffice (ALASLIBREOFFICE-2023-002)
The version of libreoffice installed on the remote host is prior to 5.3.6.1-21. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2LIBREOFFICE-2023-002 advisory. LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on vario...
PT-2023-5044 · Microsoft · Office
Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass existing security restrictions. This can potentially affect the system. Recommendations: A...