GHSA-2WR2-8QJQ-GH55 Exposure of Resource to Wrong Sphere in org.craftercms:crafter-search

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes...

The vulnerability of the Azure Sphere operating system, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the Azure Sphere operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Azure Sphere operating system, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Azure Sphere operating system is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Azure Sphere operating system, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Azure Sphere operating system is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2021-23264: Transmission of Private Resources into a New Sphere

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes...

An Azure Sphere kernel exploit — or how I learned to stop worrying and love the IoT

By Claudio Bozzato and Lilith ^.^;. As part of our continued research into Microsoft Azure Sphere, there are two vulnerabilities we discovered that we feel are particularly dangerous. For a full rundown of the 31 vulnerabilities we’ve discovered over the past year, check out our full recap... Thi...

A review of Azure Sphere vulnerabilities: Unsigned code execs, kernel bugs, escalation chains and firmware downgrades

Summary of all the vulnerabilities reported by Cisco Talos in Microsoft Azure Sphere By Claudio Bozzato and Lilith . In May 2020, Microsoft kicked off the Azure Sphere Security Research Challenge, a three-month initiative aimed at finding bugs in Azure Sphere. In the first three months,... This i...

CVE-2021-26248

Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor...

CVE-2021-42300

Azure Sphere Tampering Vulnerability...

CVE-2021-42300

Azure Sphere Tampering Vulnerability...

CVE-2021-41374

Azure Sphere Information Disclosure Vulnerability...

CVE-2021-41376

Azure Sphere Information Disclosure Vulnerability...

CVE-2021-41375

Azure Sphere Information Disclosure Vulnerability...

CVE-2021-41376

Azure Sphere Information Disclosure Vulnerability...

CVE-2021-41374

Azure Sphere Information Disclosure Vulnerability...

CVE-2021-41375

Azure Sphere Information Disclosure Vulnerability...

CVE-2021-42300

Azure Sphere Tampering Vulnerability...

CVE-2021-41376

Azure Sphere Information Disclosure Vulnerability...

CVE-2021-41374

Azure Sphere Information Disclosure Vulnerability...

CVE-2021-41375

Azure Sphere Information Disclosure Vulnerability...