11919 matches found
PT-2023-3659 · Microsoft · Defender
Name of the Vulnerable Software and Affected Versions: Microsoft Defender affected versions not specified Description: The issue is related to synchronization errors when using a shared resource, specifically a "race condition" situation. This could allow an attacker to elevate their privileges...
PT-2023-3987 · Microsoft · Windows Network Load Balancing +1
Name of the Vulnerable Software and Affected Versions: Windows Network Load Balancing affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in Windows Network Load Balancing NLB, which can be exploited by a remote attacker to...
PT-2023-3924 · Microsoft · Windows Dns Server +1
Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows DNS Server component. This can allow a remote attacker to execute arbitrary code. The...
PT-2023-3909 · Microsoft · Windows Active Directory Certificate Services +1
Name of the Vulnerable Software and Affected Versions: Windows Active Directory Certificate Services AD CS affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in Windows Active Directory Certificate Services AD CS, which can be...
PT-2023-3926 · Microsoft · Windows Dns Server +1
Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows DNS Server component. It allows a remote attacker to execute arbitrary code...
PT-2023-4104 · Sap · Sap Sql Anywhere
Name of the Vulnerable Software and Affected Versions: SAP SQL Anywhere version 17.0 Description: The issue allows an attacker to prevent legitimate users from accessing the service by crashing it. An attacker with a low-privileged account and access to the local system can write into shared memo...
PT-2023-4069 · Digiexam · Digiexam
Name of the Vulnerable Software and Affected Versions: DigiExam versions up to 14.0.2 Description: The issue is related to the lack of integrity checks for native modules in DigiExam, allowing remote attackers to access personally identifiable information PII and takeover accounts on shared...
PT-2023-8306 · D Link · D-Link Dir-X3260
Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the prog.cgi component of D-Link DIR-X3260 Wi-Fi routers, allowing remote attackers to execute arbitrary code. The...
CVE-2023-27197
PAX A930 device with PayDroid7.1.1VirgoV04.5.0220220722 can allow an attacker to gain root access by running a crafted binary leveraging an exported function from a shared library. The attacker must have shell access to the device in order to exploit this vulnerability...
CVE-2023-27197
PAX A930 device with PayDroid7.1.1VirgoV04.5.0220220722 can allow an attacker to gain root access by running a crafted binary leveraging an exported function from a shared library. The attacker must have shell access to the device in order to exploit this vulnerability...
CVE-2023-27197
PAX A930 device with PayDroid7.1.1VirgoV04.5.0220220722 can allow an attacker to gain root access by running a crafted binary leveraging an exported function from a shared library. The attacker must have shell access to the device in order to exploit this vulnerability...
Design/Logic Flaw
PAX A930 device with PayDroid7.1.1VirgoV04.5.0220220722 can allow an attacker to gain root access by running a crafted binary leveraging an exported function from a shared library. The attacker must have shell access to the device in order to exploit this vulnerability...
Authorization
PAX Technology A930 PayDroid7.1.1VirgoV04.5.0220220722 allows attackers to compile a malicious shared library and use LDPRELOAD to bypass authorization checks...
11 best practices for securing data in cloud services
In todays digital age, cloud computing has become an essential part of businesses, enabling them to store and access their data from anywhere. However, with convenience comes the risk of data breaches and cyberattacks. Therefore, it is crucial to implement best practices to secure data in cloud...
SUSE CVE-2023-2861
A flaw was found in the 9p passthrough filesystem 9pfs implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder...
CVE-2023-27197
PAX A930 device with PayDroid7.1.1VirgoV04.5.0220220722 can allow an attacker to gain root access by running a crafted binary leveraging an exported function from a shared library. The attacker must have shell access to the device in order to exploit this vulnerability...
CVE-2023-27197
CVE-2023-27197 affects PAX A930 with PayDroid 7.1.1 Virgo V04.5.02 20220722. The flaw lets an attacker with shell access gain root by running a crafted binary that uses an exported function from a shared library. Affected component/root cause: exploited via a shared-library export; impact is root...
PT-2023-20998 · Pax · Pax A930 +1
Name of the Vulnerable Software and Affected Versions: PAX A930 device with PayDroid version 7.1.1 Virgo V04.5.02 20220722 Description: The issue allows an attacker to gain root access by running a crafted binary leveraging an exported function from a shared library. The attacker must have shell...
CVE-2023-27197
PAX A930 device with PayDroid7.1.1VirgoV04.5.0220220722 can allow an attacker to gain root access by running a crafted binary leveraging an exported function from a shared library. The attacker must have shell access to the device in order to exploit this vulnerability...