29507 matches found
Microsoft and Adobe Patch Tuesday, November 2024 Security Update Review
Microsoft has released its November 2024 Patch Tuesday updates, targeting various vulnerabilities that could impact users and organizations worldwide. From zero-day threats to key product patches, here’s what’s crucial to apply this month. Here’s a breakdown of the updates and how they impact you...
CVE-2024-49019
Active Directory Certificate Services Elevation of Privilege Vulnerability...
CVE-2024-49019
Active Directory Certificate Services Elevation of Privilege Vulnerability...
CVE-2024-49019 Active Directory Certificate Services Elevation of Privilege Vulnerability
...
EUVD-2024-43896
Active Directory Certificate Services Elevation of Privilege Vulnerability...
CVE-2024-49019 Active Directory Certificate Services Elevation of Privilege Vulnerability
...
Active Directory Certificate Services Elevation of Privilege Vulnerability
...
Security Bulletin: IBM Sterling Connect:Direct Web Services is affected by multiple IBM JRE vulnerabilities
Summary IBM Sterling Connect:Direct Web Services uses IBM java, which has an unspecified vulnerability in Java SE related to the VM component could allow a remote attacker to cause high confidentiality, high integrity impacts. Vulnerability Details CVEID:CVE-2024-21147 DESCRIPTION: An unspecified...
KLA77106 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code...
Microsoft Active Directory Certificate Services 安全漏洞
Microsoft Active Directory Certificate Services is a Windows Server role from Microsoft Corporation USA that issues and manages Public Key Infrastructure PKI certificates used in secure communications and authentication protocols. A security vulnerability exists in Microsoft Active Directory...
Cisco Identity Services Engine Path Traversal Vulnerability (CNVD-2025-06672)
Cisco Identity Services Engine is an environment-aware platform from Cisco, USA. A path traversal vulnerability exists in Cisco Identity Services Engine that can be exploited by an attacker to read or delete arbitrary files...
Cisco Identity Services Engine API XML External Entity Injection Vulnerability
Cisco Identity Services Engine is an environment-aware platform from the U.S. company Cisco Cisco. The Cisco Identity Services Engine API interface has an XML external entity vulnerability that can be exploited by a remote attacker to submit a special request that can read arbitrary files in the...
Cisco Identity Services Engine Web Interface Cross-Site Scripting Vulnerability (CNVD-2024-45296)
Cisco Identity Services Engine is an environment-aware platform from the U.S. company Cisco Cisco. A cross-site scripting vulnerability exists in the Cisco Identity Services Engine WEB interface, which can be exploited by a remote attacker to inject malicious script or HTML code, which can be use...
Cisco Identity Services Engine Web Interface Cross-Site Scripting Vulnerability (CNVD-2024-45297)
Cisco Identity Services Engine is an environment-aware platform from the U.S. company Cisco Cisco. A cross-site scripting vulnerability exists in the Cisco Identity Services Engine WEB interface, which can be exploited by a remote attacker to inject malicious script or HTML code, which can be use...
Cisco Identity Services Engine Web Interface Cross-Site Scripting Vulnerability
Cisco Identity Services Engine is an environment-aware platform from the U.S. company Cisco Cisco. A cross-site scripting vulnerability exists in the Cisco Identity Services Engine WEB interface, which can be exploited by a remote attacker to inject malicious script or HTML code, which can be use...
Cisco Identity Services Engine Web Interface Cross-Site Scripting Vulnerability (CNVD-2024-45298)
Cisco Identity Services Engine is an environment-aware platform from the U.S. company Cisco Cisco. A cross-site scripting vulnerability exists in the Cisco Identity Services Engine WEB interface, which can be exploited by a remote attacker to inject malicious script or HTML code, which can be use...
Cisco Identity Services Engine Path Traversal Vulnerability (CNVD-2025-06738)
Cisco Identity Services Engine is an environment-aware platform from Cisco USA. A path traversal vulnerability exists in Cisco Identity Services Engine, which stems from insufficient filtering and validation of user-supplied parameters in API requests. An attacker could exploit this vulnerability...
Cisco Identity Services Engine Path Traversal Vulnerability (CNVD-2025-06671)
Cisco Identity Services Engine is an environment-aware platform from Cisco, USA. A path traversal vulnerability exists in Cisco Identity Services Engine that can be exploited by an attacker to read or delete arbitrary files...
