The vulnerability of the DNS server service in the Microsoft Windows operating system allows a hacker to increase their privileges.

The vulnerability of the DNS server service in the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Report: Nearly 75% of Infusion Pumps Affected by Severe Vulnerabilities

An analysis of data crowdsourced from more than 200,000 network-connected infusion pumps used in hospitals and healthcare entities has revealed that 75% of those medical devices contain security weaknesses that could put them at risk of potential exploitation. "These shortcomings included exposur...

The vulnerability of the Windows Print Spooler daemon in the Windows operating system allows a hacker to escalate their privileges.

The vulnerability of the Windows Print Spooler service in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2022-23594 Out of bounds read in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. The TFG dialect of TensorFlow MLIR makes several assumptions about the incoming GraphDef before converting it to the MLIR-based dialect. If an attacker changes the SavedModel format on disk to invalidate these assumptions and the GraphDef i...

FBI warns of bogus job postings on recruitment sites

Before Christmas was a busy time down at the fake job factory, with all manner of dubious antics out to ruin someone’s day. We’re now info February and the bogus job offers show no sign of abating. In fact, the FBI considers it to be such a problem that its issued an alert. This isn’t your typica...

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software, related to authentication mechanisms that lack sufficient protection, allows attackers to circumvent security restrictions.

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions from a remote location...

CVE-2022-21330 vulnerabilities

Vulnerabilities for packages: mysql...

The vulnerability of the Midnight Commander file manager, related to deficiencies in authentication procedures, allows attackers to compromise data integrity.

The vulnerability of the Midnight Commander file manager is related to the lack of checks and display of server timestamps. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

Business Logic Errors in silverstripe/silverstripe-framework

Description SilverStripe Framework is vulnerable to Business Logic Errors in the Failed login count since that value can be a negative number. Proof of Concept 1.After login, go to Security page under the path /admin/security/ 2.Click on any member record 3.In the member edit form, enter a negati...

CVE-2021-37116

CVE-2021-37116 affects Huawei HarmonyOS PCManager. The vulnerability is described as a weakness introduced during design that could allow changing a subscriber PIN. The NVD entry lists CVSS v3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H with a base score of 9.1 (CRITICAL) and notes impact to confidenti...

The vulnerability of the EtherChannel port in the Cisco NX-OS operating system of Cisco Nexus 9500 Series Switches allows a attacker to gain access to network resources.

The vulnerability of the EtherChannel port in the Cisco NX-OS operating system of Cisco Nexus 9500 Series Switches is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to gain access to network resources remotely...

1.6 Million WordPress Sites Under Cyberattack From Over 16,000 IP Addresses

As many as 1.6 million WordPress sites have been targeted by an active large-scale attack campaign originating from 16,000 IP addresses by exploiting weaknesses in four plugins and 15 Epsilon Framework themes. WordPress security company Wordfence, which disclosed details of the attacks, said...

CVE-2021-37059

There is a Weaknesses Introduced During Design...

CVE-2021-37059

There is a Weaknesses Introduced During Design...

CVE-2021-37059

There is a Weaknesses Introduced During Design...

Design/Logic Flaw

There is a Weaknesses Introduced During Design...

CVE-2021-37059

There is a Weaknesses Introduced During Design...

CVE-2021-37059

Technical details about CVE-2021-37059 are not publicly provided in the supplied documents. Monitor for updates from official advisories to obtain affected products, impact, and remediation information.

Dream Report ODS Remote Connector privilege escalation vulnerability

Summary A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0. A specially-crafted command injection can lead to elevated capabilities. An attacker can provide a malicious file to trigger this vulnerability. Tested Version...

Intel Is Maintaining Legacy Technology for Security Research

Interesting: Intel’s issue reflects a wider concern: Legacy technology can introduce cybersecurity weaknesses. Tech makers constantly improve their products to take advantage of speed and power increases, but customers don’t always upgrade at the same pace. This creates a long tail of old product...