7608 matches found
CVE-2023-38148 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
...
CVE-2023-38148
Mode C: CVE-2023-38148 is described in connected sources as a Windows Internet Connection Sharing (ICS) Remote Code Execution vulnerability. It is reported that an unauthenticated attacker could exploit ICS by sending a specially crafted data packet to a vulnerable system to install malware. The ...
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
...
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution User rights Access to sensitive...
CVE-2023-38148: Stack-based Buffer Overflow
Internet Connection Sharing ICS Remote Code Execution Vulnerability...
PT-2023-5062 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Internet Connection Sharing ICS function of the Windows operating system. This can be exploited by a remote attacker to execute...
Microsoft Windows Internet Connection Sharing (ICS) security vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Internet Connection Sharing ICS. An attacker exploiting this vulnerability could remotely execute code. The...
IBM Aspera Faspex Unauthorized Access
The vulnerability of the IBM Aspera Faspex file-sharing application lies in the insufficient protection of operational data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
CVE-2020-10132
SearchBlox before Version 9.1 is vulnerable to cross-origin resource sharing misconfiguration...
Design/Logic Flaw
SearchBlox before Version 9.1 is vulnerable to cross-origin resource sharing misconfiguration...
CVE-2020-10132 CVE-2020-10132
SearchBlox before Version 9.1 is vulnerable to cross-origin resource sharing misconfiguration...
CVE-2020-10132
The CVE-2020-10132 entry concerns SearchBlox before Version 9.1, vulnerable due to cross-origin resource sharing misconfiguration. Affected software is SearchBlox (prior to 9.1); root cause is CORS misconfiguration that can affect cross-domain requests. Documented impact is limited to misconfigur...
CVE-2020-10132 CVE-2020-10132
SearchBlox before Version 9.1 is vulnerable to cross-origin resource sharing misconfiguration...
CVE-2023-4623 Use-after-free in Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component
A use-after-free vulnerability in the Linux kernel's net/sched: schhfsc HFSC qdisc traffic control component can be exploited to achieve local privilege escalation. If a class with a link-sharing curve i.e. with the HFSCFSC flag set has a parent without a link-sharing curve, then initvf will call...
Low: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.3 Product Security and Bug Fix Update
An update is now available for Red Hat Ansible Automation Platform 2.3 Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
CISA Releases Update to Threat Actors Exploiting Citrix CVE-2023-3519 to Implant Webshells
The Cybersecurity and Infrastructure Security Agency CISA has released an update to a previously published Cybersecurity Advisory CSA, Threat Actors Exploiting Citrix CVE-2023-3519 to Implant Webshells. The CSA—originally released to warn network defenders of critical infrastructure organizations...
PT-2023-11444
Name of the Vulnerable Software and Affected Versions SearchBlox versions prior to 9.1 Description The issue is related to a cross-origin resource sharing misconfiguration. This misconfiguration can potentially allow unauthorized access to resources, bypassing same-origin policy restrictions...
CVE-2020-10132: Improper Neutralization of Input During Web Page Generation
SearchBlox before Version 9.1 is vulnerable to cross-origin resource sharing misconfiguration...
SearchBlox Cross-Site Scripting Vulnerability
SearchBlox is an application from US-based SearchBlox, Inc. provides a powerful enterprise search architecture for on-premise or cloud deployments. A security vulnerability exists in SearchBlox versions prior to 9.1 that stems from a cross-domain resource sharing misconfiguration...
CVE-2023-4636
The WordPress File Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...