842 matches found
Unspecified Vulnerability in Oracle Solaris (CNVD-2021-33839) (CNVD-2021-33839)
Oracle Solaris is a Unix-like operating system. A security vulnerability exists in the Common Desktop Environment component of Oracle Solaris version 10. An attacker could exploit this vulnerability to compromise Oracle Solaris by allowing a low-privileged attacker to log in to the infrastructure...
VMware Releases Security Update
VMware has released a security update to address a vulnerability affecting NSX-T. An attacker can exploit this vulnerability to take control of an affected system CISA encourages users and administrators to review VMSA-2021-0006 and apply the necessary update and workaround. This product is...
Oracle Solaris 安全漏洞
Oracle Solaris is a Unix-like operating system. A security vulnerability exists in the Common Desktop Environment component of Oracle Solaris version 10. An attacker could exploit this vulnerability to compromise Oracle Solaris by allowing a low-privileged attacker to log in to the infrastructure...
Mozilla Releases Security Update for Firefox, Firefox ESR, and Thunderbird
Mozilla has released security updates to address vulnerabilities in Firefox, Firefox ESR, and Thunderbird. An attacker can exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Mozilla Security Advisories for Firefox 88...
Siemens LOGO! Soft Comfort Path Traversal Vulnerability
Siemens LOGO! Soft Comfort is a set of automation logic programming software from Siemens Germany. A path traversal vulnerability exists in Siemens LOGO! An attacker could exploit the vulnerability to cause the system to be taken over by the attacker...
Siemens LOGO! Soft Comfort 代码问题漏洞
Siemens LOGO! Soft Comfort is a set of automation logic programming software from Siemens Germany. A security vulnerability exists in Siemens LOGO! A local attacker could exploit this vulnerability to cause a takeover of the system on which the software is installed...
Siemens LOGO! Soft Comfort Uncontrolled Search Path Element Vulnerability
Siemens LOGO! Soft Comfort is a set of automation logic programming software from Siemens Germany. A security vulnerability exists in Siemens LOGO! A local attacker could exploit this vulnerability to cause a takeover of the system on which the software is installed...
Google Chrome Security Update (stable-channel-update-for-desktop_16-2021-02) - Windows
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird
Mozilla has released security updates to address vulnerabilities in Firefox, Firefox ESR, and Thunderbird. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Mozilla Security Advisories for Firefox 85,...
Backdoor.Win32.DarkKomet.apbb Insecure Permissions
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/d6c930e0ac1df934151d1890f6441fe2.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.DarkKomet.apbb Vulnerability: Insecure Permissions Description: DarkKomet creates an...
VMware Releases Security Updates for VMware SD-WAN Orchestrator
VMware has released security updates to address multiple vulnerabilities in VMware SD-WAN Orchestrator. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to...
Apple Releases Security Updates for Multiple Products
Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. Some of these vulnerabilities have been detected in exploits in the wild. The Cybersecurity and Infrastructure Securi...
Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird
Mozilla has released security updates to address a vulnerability in Firefox, Firefox ESR, and Thunderbird. An attacker could exploit this vulnerability to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review th...
Cisco Releases Security Updates for Multiple Products
Cisco has released security updates to address vulnerabilities in multiple Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the Cis...
Adobe Releases Security Updates for Acrobat and Reader
Adobe has released security updates to address vulnerabilities in Adobe Acrobat and Reader. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review Adobe...
Security Bulletin: IBM Security QRadar Packet Capture is vulnerable to Using Components with Known Vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Vulnerability Details CVEID: CVE-2020-2583 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Serialization component could allow an...
Microsoft Releases Security Update for Edge
Microsoft has released a security update to address vulnerabilities in Edge Chromium-based. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the...
Windows COM Server Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit this vulnerability, an attacker would first have to log on to the system. An...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Security Guardium Insights
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 used by IBM Security Guardium Insights. These issues were disclosed as part of the IBM Java SDK updates in January 2020 - Includes Oracle Jan 2020 CPU. Vulnerability Details CVEID: CVE-2020-2604 DESCRIPTION...
