21250 matches found
Dell Virtual Appliance Manager 操作系统命令注入漏洞
Dell Virtual Appliance Manager is a virtual appliance manager from Dell USA. A command injection vulnerability exists in Dell Virtual Appliance Manager, which can be exploited by an attacker to cause arbitrary operating system commands to be executed on an affected system...
How to enable Azure Accelerated Networking on MCS VMs
To give an overview of how to enable the Azure Accelerated Networking Feature on MCS provisioned VMs...
PT-2023-31090 · Braincert · Braincert – Html5 Virtual Classroom
Name of the Vulnerable Software and Affected Versions: BrainCert – HTML5 Virtual Classroom versions n/a through 1.30 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in BrainCert –...
Dell Virtual Appliance Manager 路径遍历漏洞
Dell Virtual Appliance Manager is a virtual appliance manager from Dell USA. An arbitrary file read vulnerability exists in Dell Virtual Appliance Manager, which can be exploited by an attacker to read arbitrary files from the target system...
Dell Virtual Appliance Manager 安全漏洞
Dell Virtual Appliance Manager is a virtual appliance manager from Dell USA. An information disclosure vulnerability exists in Dell Virtual Appliance Manager, which could be exploited by an attacker to obtain sensitive information that could be used in further attacks...
Dell Virtual Appliance Manager 操作系统命令注入漏洞
Dell Virtual Appliance Manager is a virtual appliance manager from Dell USA. A command injection vulnerability exists in Dell Virtual Appliance Manager, which can be exploited by an attacker to cause arbitrary operating system commands to be executed on an affected system...
CVE-2023-45174
IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a privileged local user to exploit a vulnerability in the qdaemon command to escalate privileges or cause a denial of service. IBM X-Force ID: 267972...
CVE-2023-45166
IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the piodmgrsu command to obtain elevated privileges. IBM X-Force ID: 267964...
CVE-2023-46247
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine EVM. Contracts containing large arrays might underallocate the number of slots they need by 1. Prior to v0.3.8, the calculation to determine how many slots a storage variable needed used math.ceiltype.sizeinbytes / 32. T...
Design/Logic Flaw
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine EVM. Contracts containing large arrays might underallocate the number of slots they need by 1. Prior to v0.3.8, the calculation to determine how many slots a storage variable needed used math.ceiltype.sizeinbytes / 32. T...
CVE-2023-46247 Vyper has incorrect storage layout for contracts containing large arrays
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine EVM. Contracts containing large arrays might underallocate the number of slots they need by 1. Prior to v0.3.8, the calculation to determine how many slots a storage variable needed used math.ceiltype.sizeinbytes / 32. T...
USN-6549-3 linux-lowlatency, linux-lowlatency-hwe-5.15 vulnerabilities
It was discovered that the USB subsystem in the Linux kernel contained a race condition while handling device descriptors in certain situations, leading to a out-of-bounds read vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2023-37453 Lin Ma...
USN-6549-3: Linux kernel (Low Latency) vulnerabilities
It was discovered that the USB subsystem in the Linux kernel contained a race condition while handling device descriptors in certain situations, leading to a out-of-bounds read vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2023-37453 Lin Ma...
USN-6534-3: Linux kernel vulnerabilities
It was discovered that the USB subsystem in the Linux kernel contained a race condition while handling device descriptors in certain situations, leading to a out-of-bounds read vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2023-37453 Lin Ma...
Microsoft Warns of Hackers Exploiting OAuth for Cryptocurrency Mining and Phishing
Microsoft has warned that adversaries are using OAuth applications as an automation tool to deploy virtual machines VMs for cryptocurrency mining and launch phishing attacks. "Threat actors compromise user accounts to create, modify, and grant high privileges to OAuth applications that they can...
Error: Provisioning Scheme already has another task running in PowerShell
NOTE : This article contains information about removing virtual machines in bulk directly from PowerShell Removing multiple virtual machines at a time can be done using Remove-ProvVM but if not done with the correct syntax, it will generate errors indicating that the provisioning scheme already h...
Ubuntu: Security Advisory (USN-6534-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IBM AIX 安全漏洞
IBM AIX is an open standards-based UNIX operating system developed by International Business Machines IBM for the IBM Power architecture. An elevation of privilege vulnerability exists in IBM AIX and VIOS, which can be exploited by an attacker to elevate privileges or cause a denial of service...
The vulnerability of the controller service of the SonicWall WAN Acceleration (WXA) 5000 Virtual Appliance allows attackers to bypass authentication procedures, gain unauthorized access to protected information, and execute arbitrary code. This vulnerability enables attackers to circumvent security measures.
The vulnerability of the virtual device controller service in the SonicWall WAN Acceleration WXA 5000 Virtual Appliance lies in the use of rigidly encoded credentials. Exploiting this vulnerability allows an attacker operating remotely to bypass authentication procedures, gain unauthorized access...