8108 matches found
CVE-2023-36238
Insecure Direct Object Reference IDOR in Bagisto v.1.5.1 allows an attacker to obtain sensitive information via the invoice ID parameter...
CVE-2023-36238
CVE-2023-36238 is an IDOR in Bagisto v1.5.1 that allows an attacker to obtain sensitive information by manipulating the invoice ID parameter. The vulnerability is rooted in insufficient validation of the invoice ID passed to the application, with Red Hat and Veracode sources describing the issue ...
CVE-2023-36238
Insecure Direct Object Reference IDOR in Bagisto v.1.5.1 allows an attacker to obtain sensitive information via the invoice ID parameter...
Patch Tuesday - March 2024
Microsoft is addressing 60 vulnerabilities this March 2024 Patch Tuesday. Microsoft indicated that they aren’t aware of prior public disclosure or exploitation in the wild for any of the vulnerabilities patched today, which means no new additions to CISA KEV at time of writing. Microsoft is...
Another Patch Tuesday with no zero-days, only two critical vulnerabilities disclosed by Microsoft
For the second month in 2024, there are no actively exploited vulnerabilities included in this months security update from Microsoft. Marchs Patch Tuesday is relatively light, containing 60 vulnerabilities -- only two labeled "critical." Last months Patch Tuesday included more than 70 security...
CVE-2024-21408
Windows Hyper-V Denial of Service Vulnerability...
CVE-2024-21408
Windows Hyper-V Denial of Service Vulnerability...
CVE-2024-21407
Windows Hyper-V Remote Code Execution Vulnerability...
CVE-2024-21407
Windows Hyper-V Remote Code Execution Vulnerability...
Remote code execution
Windows Hyper-V Remote Code Execution Vulnerability...
Denial of service
Windows Hyper-V Denial of Service Vulnerability...
CVE-2024-21408
Microsoft’s CVE-2024-21408 is a Windows Hyper-V Denial of Service vulnerability that can be triggered by a guest to cause a host crash. The available connected sources confirm Hyper-V as the affected product, the host compromise from a guest as the attack scenario, and a DoS impact. The CVSS vect...
CVE-2024-21408 Windows Hyper-V Denial of Service Vulnerability
...
CVE-2024-21407 Windows Hyper-V Remote Code Execution Vulnerability
...
CVE-2024-21407
CVE-2024-21407 is a Windows Hyper-V Remote Code Execution vulnerability tied to the Hyper-V component. Exploitation requires an authenticated attacker on a guest to send specially crafted file operation requests to hardware resources on the VM, which could lead to remote code execution on the hos...
CVE-2024-21408 Windows Hyper-V Denial of Service Vulnerability
...
CVE-2024-21407 Windows Hyper-V Remote Code Execution Vulnerability
...
USN-6690-1 openvswitch vulnerabilities
Timothy Redaelli and Haresh Khandelwal discovered that Open vSwitch incorrectly handled certain crafted Geneve packets when hardware offloading via the netlink path is enabled. A remote attacker could possibly use this issue to cause Open vSwitch to crash, leading to a denial of service...
