UNISOC chipset 安全漏洞

UNISOC chipset is an integrated circuit chipset from China's Unisoc Corporation. A security vulnerability exists in the UNISOC chipset that stems from a lack of privilege checking in network services, which could lead to a local privilege escalation that requires system execution privileges...

The vulnerability of Group Policy Services in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of Group Policy Services in Windows operating systems is related to synchronization errors when using common resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2022-38199 BUG-000144172 - Remote file download issue in ArcGIS Server

A remote file download issue can occur in some capabilities of Esri ArcGIS Server web services that may in some edge cases allow a remote, unauthenticated attacker to induce an unsuspecting victim to launch a process in the victim's PATH environment. Current browsers provide users with warnings...

The vulnerability in the fax sending and scanning services of the Microsoft Windows operating system allows a hacker to escalate their privileges.

The vulnerability of the Microsoft Windows operating system’s fax and scanning services is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

Attackers Escape Kubernetes Containers using “cr8escape” Vulnerability in CRI-O

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here. A flaw in CRI-O, an open-source Linux implementation of Kubernetes Container Runtime Interface CRI, was discovered that may allow an attacker to gain remote control of servers and potentially poison the container with attack...

The vulnerability of the Windows operating system’s Roaming Security Rights Management Services allows a perpetrator to execute arbitrary code.

The vulnerability of the Roaming Security Rights Management Services service in the Windows operating system is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the systeminformation library in the Node.js software platform allows a hacker to execute arbitrary code.

The vulnerability of the systeminformation library in the Node.js software platform is related to errors in transmitting data to the parameters of the si.inetLatency, si.inetChecksite, si.services, and si.processLoad services. Exploiting this vulnerability allows a remote attacker to execute...

OPENSUSE-SU-2021:0917-1 Security update for gupnp

This update for gupnp fixes the following issues: - CVE-2021-33516: Fixed a DNS rebinding, which could trick the browser into triggering actions against local UPnP services bsc1186590. This update was imported from the SUSE:SLE-15-SP2:Update update project...

Microsoft SharePoint Server Spoofing Vulnerability (CNVD-2021-41124)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A spoofing...

Microsoft Office SharePoint 输入验证错误漏洞

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A spoofing...

About the security content of watchOS 7.5

About the security content of watchOS 7.5 This document describes the security content of watchOS 7.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

SAP Banking Services 安全漏洞

SAP Banking Services is a banking services solution from SAP. A security vulnerability exists in SAP Banking Services, which can be exploited by an attacker to gain elevation of privilege because the program does not perform proper authorization detection...

PT-2020-4719 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: The issue is related to insufficient validation of user-supplied input by...

Unauthorized access vulnerability in web services of Unicom optical cats HG6543C, HG6201U, HG2201U

China United Network Communications Group Corporation "China Unicom" is principally engaged in fixed communications business, mobile communications business, domestic and international communications facilities services, data communications business, network access business, various...

The vulnerability of the WLS Web Services component of the Oracle WebLogic Server application server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the WLS Web Services component of the Oracle WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through the IIOP and T3 network protocols...

The vulnerability of the WLS Web Services component of the Oracle WebLogic Server application server allows a attacker to gain full control over the application.

The vulnerability of the WLS Web Services component of the Oracle WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the application through the IIOP and T3 network protocols...

The vulnerability of Apache CXF web services, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of Apache CXF web services is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending a specially crafted message, whose embedded data exceeds the allowed limit...

Exposed API

centreon/centreon serves API without the need for authentication. Various web services were fully accessible using external.php which would allow an unauthenticated attacker to perform actions on the server...

Exploit for Use After Free in Microsoft

CVE-2019-0708 - BlueKeep RDP RDP Connection Sequence:...

The vulnerability of the WLS component – the Web Services server of Oracle WebLogic Server – allows a perpetrator to gain access to protected information.

The vulnerability of the WLS component—the Web Services server of Oracle WebLogic Server—is related to insufficient access control. Exploiting this vulnerability could allow an attacker operating remotely to gain access to protected information using the HTTP protocol...