6735 matches found
PT-2023-6035 · Apple · Macos Sonoma +5
Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.6 iOS versions prior to 16.7 iPadOS versions prior to 16.7 watchOS versions prior to 10 iOS versions prior to 17 iPadOS versions prior to 17 macOS Sonoma versions prior to 14 Description: A logic issue was...
WordPress File Sharing < 2.0.4 - Admin+ Stored XSS
Description The plugin does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2023-41387
A SQL injection in the flutterdownloader component through 1.11.1 for iOS allows remote attackers to steal session tokens and overwrite arbitrary files inside the app's container. The internal database of the framework is exposed to the local user if an app uses UIFileSharingEnabled and...
CVE-2023-41387
A SQL injection in the flutterdownloader component through 1.11.1 for iOS allows remote attackers to steal session tokens and overwrite arbitrary files inside the app's container. The internal database of the framework is exposed to the local user if an app uses UIFileSharingEnabled and...
The vulnerability of the IBM Aspera Faspex application’s configuration, related to insufficient data authenticity verification, allows a perpetrator to compromise the integrity of the protected information.
The vulnerability of the IBM Aspera Faspex file-sharing application relates to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...
The vulnerability of the Internet Connection Sharing (ICS) function of the Windows operating system, which allows for the execution of arbitrary code
The vulnerability of the Internet Connection Sharing ICS function in the Windows operating system is related to insufficient checking of data entered by users. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2023-38148
Internet Connection Sharing ICS Remote Code Execution Vulnerability...
Remote code execution
Internet Connection Sharing ICS Remote Code Execution Vulnerability...
CVE-2023-38148
Mode C: CVE-2023-38148 is described in connected sources as a Windows Internet Connection Sharing (ICS) Remote Code Execution vulnerability. It is reported that an unauthenticated attacker could exploit ICS by sending a specially crafted data packet to a vulnerable system to install malware. The ...
CVE-2023-38148 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
...
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
...
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution User rights Access to sensitive...
Microsoft Windows Internet Connection Sharing (ICS) security vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Internet Connection Sharing ICS. An attacker exploiting this vulnerability could remotely execute code. The...
PT-2023-5062 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Internet Connection Sharing ICS function of the Windows operating system. This can be exploited by a remote attacker to execute...
The vulnerability of the IBM Aspera Faspex file-sharing application configuration allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the IBM Aspera Faspex file-sharing application lies in the insufficient protection of operational data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
CVE-2020-10132
SearchBlox before Version 9.1 is vulnerable to cross-origin resource sharing misconfiguration...
Design/Logic Flaw
SearchBlox before Version 9.1 is vulnerable to cross-origin resource sharing misconfiguration...
CVE-2020-10132
The CVE-2020-10132 entry concerns SearchBlox before Version 9.1, vulnerable due to cross-origin resource sharing misconfiguration. Affected software is SearchBlox (prior to 9.1); root cause is CORS misconfiguration that can affect cross-domain requests. Documented impact is limited to misconfigur...
