2921 matches found
xstream: Arbitrary code execution via unsafe deserialization of sun.tracing.*
A flaw was found in xstream, a simple library used to serialize objects to XML and back again. This flaw allows a remote attacker to load and execute arbitrary code from a remote host by manipulating the processed input stream...
The vulnerability of the Covid-19 contact tracing system’s web app that uses QR code scanning lies in the insufficient protection of operational data, allowing attackers to carry out cross-site attacks.
The vulnerability of the Covid-19 contact tracing system’s web app with QR code scanning lies in the insufficient protection of sensitive data when the username parameter is used on the login page. Exploiting this vulnerability could allow a malicious actor to perform cross-site attacks using a...
Vulnerabilities that aren’t. Cross Site Tracing / XST
This is the first of my posts that explain why some common security vulnerabilities are most likely not real threats. They should be treated as security enhancements rather than vulnerabilities. Bearing in mind the number of scanning tools that rate such vulnerabilities as "high" its no wonder...
CVE-2022-22166
An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause an rdp crash and thereby a Denial of Service DoS. If a BGP update message is received over an established BGP...
Input validation
An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause an rdp crash and thereby a Denial of Service DoS. If a BGP update message is received over an established BGP...
PT-2022-2649 · Juniper Networks · Junos
Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 20.4 prior to 20.4R3-S1 Juniper Networks Junos OS versions 21.1 prior to 21.1R2-S2, 21.1R3 Description: The issue is caused by an improper validation of specified quantity in input in the routing protocol...
CVE-2022-21872
Windows Event Tracing Elevation of Privilege Vulnerability...
CVE-2022-21872
Windows Event Tracing Elevation of Privilege Vulnerability...
CVE-2022-21872
Windows Event Tracing Elevation of Privilege Vulnerability...
CVE-2022-21839
Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability...
CVE-2022-21839
Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability...
CVE-2022-21839
Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability...
Privilege escalation
Windows Event Tracing Elevation of Privilege Vulnerability...
Denial of service
Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability...
CVE-2022-21872
Technical details about CVE-2022-21872 are not provided in connected documents. Public input only labels it as Windows Event Tracing Elevation of Privilege Vulnerability; monitor for updates.
CVE-2022-21872 Windows Event Tracing Elevation of Privilege Vulnerability
...
CVE-2022-21839 Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability
...
CVE-2022-21839
CVE-2022-21839 is a Windows vulnerability in Event Tracing Discretionary Access Control List that enables DoS. Microsoft notes easy remote exploitation with authentication required; impact is Denial of Service. Remediated by the January 2022 security updates (e.g., KB5009557) addressing Windows E...
