The vulnerability of the Microsoft .NET Framework software, related to security configuration errors, allows a perpetrator to gain access to the hidden parts of a web application.

The vulnerability of the Microsoft.NET Framework is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to restricted parts of a web application by sending a specially crafted request...

The vulnerability of the Microsoft Office software package, related to security configuration errors, allows attackers to bypass security restrictions and enhance their privileges.

The vulnerability of the Microsoft Office suite is related to security configuration errors. Exploiting this vulnerability can allow attackers to bypass security restrictions and enhance their privileges by opening a specially created malicious file...

The vulnerability of Microsoft On-Premises Data Gateways lies in security configuration errors, allowing attackers to circumvent security restrictions.

The vulnerability of Microsoft On-Premises Data Gateways is related to errors in security settings when processing certificates. Exploiting this vulnerability allows a malicious actor to bypass security restrictions by sending a specially crafted web request...

CVE-2023-5719

The Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for users and to download the resulting security configuration to a device. If such a password contains the percent % character, invalid values will be included, potentially truncating...

CVE-2023-5719 Red Lion Crimson Improper Neutralization of Null Byte or NUL Character

The Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for users and to download the resulting security configuration to a device. If such a password contains the percent % character, invalid values will be included, potentially truncating...

Rocky Linux 9 : dovecot (RLSA-2022:8208)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:8208 advisory. - An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entries exist with the same driver and args...

Code injection

Secret token configuration is never applied when using ECK =8.0. This could lead to anonymous requests to an APM Server being accepted and the data ingested into this APM deployment...

Resetting a sub-account's guard manually from the Main Console can potentially lead to a permanent denial of service (DoS) for that sub-account.

Lines of code Vulnerability details Impact If the Main Console resets the guard, resets the fallback handler, or disables itself as a module of a sub-account, the executors will permanently cease executing any transactions on that sub-account. And also if the Main Console resets the fallback...

The vulnerability of the Windows operating system’s kernel, related to security configuration errors, allows attackers to circumvent existing security restrictions.

The vulnerability of the Windows operating system’s kernel is related to security configuration errors. Exploiting this vulnerability can allow attackers to bypass existing security restrictions...

CVE-2023-24855

Memory corruption in Modem while processing security related configuration before AS Security Exchange...

CVE-2023-24855 Use of Out-of-range Pointer Offset in Modem

Memory corruption in Modem while processing security related configuration before AS Security Exchange...

CVE-2023-24855 Use of Out-of-range Pointer Offset in Modem

Memory corruption in Modem while processing security related configuration before AS Security Exchange...

CVE-2023-24855

CVE-2023-24855 is a memory-corruption in Qualcomm’s modem when processing security-related configuration before the AS Security Exchange. Root cause described as an out-of-bounds pointer offset that can lead to remote code execution. Public sources (Qualcomm bulletin, Red Hat/PRION notes) describ...

PT-2023-5876 · Qualcomm · Qualcomm

Name of the Vulnerable Software and Affected Versions: Qualcomm affected versions not specified Description: The issue is related to memory corruption in the modem while processing security-related configuration before AS Security Exchange. This corruption is due to an out-of-bounds pointer offse...

The vulnerability of the IBM Robotic Process Automation software, related to security configuration errors, allows a perpetrator to alter the cluster configuration.

The vulnerability of the IBM Robotic Process Automation software lies in security configuration errors. Exploiting this vulnerability could allow an attacker to alter the cluster configuration...

The vulnerability of the IBM Robotic Process Automation software, related to security configuration errors, allows attackers to exploit their privileges.

The vulnerability of the IBM Robotic Process Automation software lies in security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the MSHTML platform in Windows operating systems allows attackers to circumvent existing security restrictions.

The vulnerability of the MSHTML platform in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

The vulnerability of the Microsoft Office software package, related to security configuration errors, allows attackers to circumvent existing security restrictions.

The vulnerability of the Microsoft Office suite is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

The vulnerability of Microsoft Defender operating systems for Windows, related to security configuration errors, allows a hacker to bypass existing security restrictions.

The vulnerability of Microsoft Defender’s operating system vulnerabilities is related to security configuration errors. Exploiting this vulnerability can allow a hacker to bypass existing security restrictions using a specially created file...

Remote Code Execution

ethyca-fides is vulnerable to Arbitrary Code Execution. The vulnerability is due to certain API clients who have a special level of permission called "CONNECTORTEMPLATEREGISTER." In the Fides Admin interface one can upload a zip file with arbitrary python code and can execute it. Exploitation is...