12832 matches found
Vulnerabilities fixed in SAP products
Vulnerabilities have been fixed in SAP products. The vulnerabilities enable a malicious person to launch attacks that lead to the following categories of damage: Cross-Site Request Forgery XSRF. Bypassing authentication Bypassing security measure Remote code execution User Rights SAP designates...
Vulnerabilitiesj fixed in Xerox AltaLink systems
Xerox has fixed vulnerabilities in AltaLink systems. The vulnerabilities allow a malicious party to execute arbitrary execute arbitrary code on the system, circumvent a security measure bypass a security measure or gain access to sensitive data. No CVE ID of the vulnerabilities has been disclosed...
KLA12108 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Internet Explorer can be exploited remotely to execute arbitrary code. 2....
KLA12111 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation...
CVE-2021-21362
MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage service. In MinIO before version RELEASE.2021-03-04T00-53-13Z it is possible to bypass a readOnly policy by creating a temporary 'mc share upload' URL. Everyone is impacted who us...
KLA12157 SB vulnerability in Mozilla Thunderbird
A security bypass vulnerability was found in Mozilla Thunderbird. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories MFSA2021-17 Related products Mozilla-Thunderbird CVE list CVE-2021-29950 critical Solution Update to...
Google Chrome 安全漏洞
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome Compositing. An attacker can exploit this vulnerability to bypass security restrictions...
Google Chrome Performance API Security Bypass Vulnerability
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in the Google Chrome Performance API. An attacker can exploit this vulnerability to bypass security restrictions...
Google Chrome 安全漏洞
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 89.0.4389.72. An attacker can exploit this vulnerability to bypass security restrictions...
Google Chrome 访问控制错误漏洞
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in versions of Google Chrome prior to 89.0.4389.72. An attacker can exploit this vulnerability to bypass security restrictions...
Google Chrome 访问控制错误漏洞
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in the Google Chrome Performance API. An attacker can exploit this vulnerability to bypass security restrictions...
Google Chrome Extension Security Bypass Vulnerability
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome Extensions. An attacker can exploit this vulnerability to bypass security restrictions...
Google Chrome 授权问题漏洞
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome Autofill. An attacker can exploit this vulnerability to bypass security restrictions...
Google Chrome Autofill Security Bypass Vulnerability
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome Autofill. An attacker can exploit this vulnerability to bypass security restrictions...
Google Chrome 安全漏洞
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome Extensions. An attacker can exploit this vulnerability to bypass security restrictions...
grub2: Use-after-free in rmmod command
A flaw was found in grub2. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other dependent module is still loaded leading to a use-after-free scenario. This could allow arbitrary code to be executed or a bypass of Secure Boot protections. The...
grub2: Use-after-free in rmmod command
A flaw was found in grub2. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other dependent module is still loaded leading to a use-after-free scenario. This could allow arbitrary code to be executed or a bypass of Secure Boot protections. The...
The vulnerability of the NX-OS operating system in ACI Mode allows a hacker to bypass security checks and connect an unauthorized server to the VLAN infrastructure.
The vulnerability of the NX-OS operating system in ACI Mode is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to bypass security checks and connect unauthorized servers to the VLAN infrastructure...
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Google Guava
Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of Google Guava. Vulnerability Details CVEID: CVE-2020-8908 DESCRIPTION: Guava could allow a remote authenticated attacker to bypass security restrictions, caused by a temp directory creation vulnerability in...
Vulnerabilities fixed in Node.js
Node.js developers have fixed vulnerabilities. The vulnerabilities allow an unauthorized remote malicious person to remote user to cause a denial-of-service and to bypass a security measure. -= Debian =- Debian has made updates to nodejs available for to address the vulnerabilities. You can insta...