649 matches found
Exposure of Resource to Wrong Sphere in Spring Data REST
In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for...
Grafana Datasource Network Restriction Bypass Vulnerability (GHSA-9rrr-6fq2-4f99)
Grafana is prone to a datasource network restriction bypass vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
The vulnerability of the Microsoft Office software package, related to security configuration errors, allows attackers to disclose sensitive information.
The vulnerability of the Microsoft Office suite is related to security configuration errors. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by the system’s security measures...
Microsoft Edge’s vulnerability, related to security configuration errors, allows attackers to escalate their privileges.
The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...
Microsoft Edge’s vulnerability, related to security configuration errors, allows attackers to escalate their privileges.
The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...
Open-Xchange: Privilege escalation possible in dovecot when similar passdbs are used
Summary --------- Privilege escalation is possible as a result of incorrect security code logic for dovecot passdb definitions. Description ------------ When two passdb configuration entries exist in the dovecot configuration which have the same driver and args settings, the incorrect...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 Docker $ sudo docker build -t . $ sudo...
The vulnerability of the access control tool for corporate applications and Microsoft Intune Company Portal for iOS is related to security configuration errors, allowing a perpetrator to circumvent security restrictions.
The vulnerability of the access control mechanism for corporate applications and Microsoft Intune Company Portal for iOS is related to security configuration errors. Exploiting this vulnerability could allow a perpetrator to circumvent security restrictions...
The vulnerability of the HTML platform of the Microsoft Windows operating system, which allows a perpetrator to disclose protected information
The vulnerability of the HTML platform of the Microsoft Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to security configuration errors, allowing attackers to bypass security measures.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to security configuration errors. Exploiting this vulnerability can allow attackers to bypass security measures...
[SECURITY] Fedora 36 Update: icecat-91.7.0-1.rh1.fc36
GNU IceCat is the GNU version of the Firefox ESR browser. Extensions included to this version of IceCat: LibreJS GNU LibreJS aims to address the JavaScript problem described in the article "The JavaScript Trap" of Richard Stallman. HTTPS Everywhere HTTPS Everywhere is an extension that encrypts...
10 best practices for S3 bucket security configuration
Explore the 10 best security practices for Amazon S3 and how easy it is to configure security features that can prevent these attacks...
The vulnerability of the BitLocker data protection function of the Microsoft Windows operating system, which allows a hacker to bypass the authentication process
The vulnerability of the BitLocker data protection function in the Microsoft Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow an attacker to bypass the authentication process...
The vulnerability of the Windows Common Log File System Driver in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Common Log File System Driver in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the Windows DWM Core Library on Windows operating systems, which allows attackers to enhance their privileges
The vulnerability of the Windows DWM Core Library in operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of Microsoft Windows Defender operating systems, which allows a hacker to bypass security restrictions
The vulnerability of Microsoft Windows Defender operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to circumvent security restrictions...
The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows a hacker to circumvent security restrictions.
The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to circumvent security restrictions...
CVE-2021-39992
There is an improper security permission configuration vulnerability on ACPU.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability...
The vulnerability of the Windows HTML Platform component of the Windows operating system, related to security configuration errors, allows attackers to circumvent existing security restrictions.
The vulnerability of the Windows HTML Platform component of the Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...
The vulnerability of operating systems iPadOS, watchOS, iOS, tvOS, and Mac OS, related to security configuration errors, allows attackers to modify arbitrary files.
The vulnerabilities of operating systems iPadOS, watchOS, iOS, tvOS, and Mac OS are related to security configuration errors. Exploiting these vulnerabilities can allow attackers to modify arbitrary files...