12762 matches found
KLA20148 ACE vulnerability in Apache Tomcat
Remote code execution vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Apache Tomcat 8.x vulnerabilities Related products Apache-Tomcat CVE list CVE-2022-45143 critical Solution Update to the latest version...
The vulnerability of the Home Network Administration Protocol (HNAP) implementation in D-Link DIR-1935 router microsoftware allows a hacker to circumvent security restrictions.
The vulnerability of the Home Network Administration Protocol HNAP implementation in D-Link DIR-1935 router microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions remotely...
Google Chrome Security Update (stable-channel-update-for-desktop-2022-11) - Linux
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
WordPress Plugin Simple History Security Bypass Vulnerability
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security bypass vulnerability exists in the WordPress plugin Simple History, which can be exploited by attackers to insert malicious data into l...
High Severity Vulnerabilities Reported in F5 BIG-IP and BIG-IQ Devices
Multiple security vulnerabilities have been disclosed in F5 BIG-IP and BIG-IQ devices that, if successfully exploited, to completely compromise affected systems. Cybersecurity firm Rapid7 said the flaws could be abused to remote access to the devices and defeat security constraints. The issues...
PT-2022-5573 · F5 · Big-Ip
Name of the Vulnerable Software and Affected Versions: BIG-IP versions prior to the fixed version Description: The issue is related to an undisclosed iControl REST endpoint in BIG-IP, allowing an authenticated user with the Administrator role to bypass Appliance mode restrictions when running in...
WordPress plugin Simple History 安全漏洞
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security bypass vulnerability exists in the WordPress plugin Simple History, which can be exploited by attackers to insert malicious data into l...
KLA20049 Multiple vulnerabilities in Mozilla Firefox
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, bypass security restrictions, obtain sensitive information, execute arbitrary code, gain privileges, perform cross-site scripting attack. Bel...
KLA20051 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, obtain sensitive information, execute arbitrary code, bypass security restrictions, perform cross-site scripting attack. Below is a...
KLA20050 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, obtain sensitive information, execute arbitrary code, bypass security restrictions, perform cross-site scripting attack. Below is a...
The vulnerability of the Windows operating system’s Portable Device Enumerator Service allows a hacker to circumvent existing security restrictions.
The vulnerability of the Windows Operating System’s Portable Device Enumerator Service is related to the use of a rigidly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...
Security feature bypass
IBM CICS TX 11.1 Standard and Advanced could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a victim to a phishing site. IBM X-Force ID: 234172...
KLA20149 ACE vulnerability in Apache Tomcat
Remote code execution vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Apache Tomcat 9.x vulnerabilities Apache Tomcat 10.x vulnerabilities Related products Apache-Tomcat CVE list CVE-2022-45143 critical Soluti...
CVE-2022-34331 IBM Power FW security bypass
After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly configured leading to desired VEPA configuration being disabled. IBM X-Force ID: 229695...
CVE-2022-34331 IBM Power FW security bypass
After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly configured leading to desired VEPA configuration being disabled. IBM X-Force ID: 229695...
CVE-2022-3294
A flaw was found in Kubernetes, where users may have access to secure endpoints in the control plane network. Kubernetes supports node proxying, which allows clients of kube-apiserver to access endpoints of a Kubelet to establish connections to Pods, retrieve container logs, and more. While...
CVE-2022-41104
Microsoft Excel Security Feature Bypass Vulnerability...
CVE-2022-41099
BitLocker Security Feature Bypass Vulnerability...