1078 matches found
Vulnerabilities fixed in Microsoft Azure products
Microsoft has fixed vulnerabilities in Azure products. The vulnerabilities allow a malicious party to gain elevated permissions and to obtain sensitive data. Azure RTOS: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact |...
Inclusion of Functionality from Untrusted Control Sphere in CKEditor 4
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space in the Autolink plugin...
GHSA-WPVM-WQR4-P7CW Inclusion of Functionality from Untrusted Control Sphere in CKEditor 4
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space in the Autolink plugin...
Inclusion of Functionality from Untrusted Control Sphere in CKEditor 4
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space in the Autolink plugin...
CVE-2021-36956
Azure Sphere Information Disclosure Vulnerability...
CVE-2021-36956
Azure Sphere Information Disclosure Vulnerability...
Information disclosure
Azure Sphere Information Disclosure Vulnerability...
CVE-2021-36956 Azure Sphere Information Disclosure Vulnerability
...
CVE-2021-36956
Azure Sphere CVE-2021-36956 is an information-disclosure vulnerability in Azure Sphere OS. The issue is described as a lack of protection for service data, enabling sensitive data exposure. Impact is disclosed as data leakage (CONFIDENTIALITY impact). Root cause notes point to unprotected service...
Azure Sphere Information Disclosure Vulnerability
...
Microsoft Azure Sphere Security Monitor SMSyscallPeripheralAcquire information disclosure vulnerability
Talos Vulnerability Report TALOS-2021-1309 Microsoft Azure Sphere Security Monitor SMSyscallPeripheralAcquire information disclosure vulnerability September 14, 2021 CVE Number None SUMMARY An information disclosure vulnerability exists in the Security Monitor SMSyscallPeripheralAcquire...
Microsoft Azure Sphere 安全漏洞
Microsoft Azure Sphere is an appliance from Microsoft Corporation USA that is used to provide security in cloud environments. A security vulnerability exists in Microsoft Azure Sphere. The following products and versions are affected: Azure Sphere...
PT-2021-6958 · Microsoft · Azure Sphere
Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to a lack of protection for service data in the Azure Sphere operating system. Exploitation of this issue may allow an attacker to gain unauthorized access to...
Security update for nextcloud (important)
openSUSE Security Update: Security update for nextcloud Announcement ID: openSUSE-SU-2021:1250-1 Rating: important References: 1190291 Cross-References: CVE-2021-32766 CVE-2021-32800 CVE-2021-32801 CVE-2021-32802 CVSS scores: CVE-2021-32800 NVD : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N...
The vulnerability of the Azure Sphere operating system, related to insufficient validation of input data, allows a hacker to trigger a service failure.
The vulnerability of the Azure Sphere operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of Azure Sphere operating systems, related to insufficient protection of sensitive data, allows attackers to gain unauthorized access to protected information.
The vulnerability of Azure Sphere operating systems is related to insufficient protection for service data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
The vulnerability of Azure Sphere operating systems, related to deficiencies in access control, allows attackers to escalate their privileges.
The vulnerability of Azure Sphere operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2021-26430
Azure Sphere Denial of Service Vulnerability...