‼ CVE-2023-24859 ‼
📖 Read
via "National Vulnerability Database".
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24876 ‼
📖 Read
via "National Vulnerability Database".
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24913 ‼
📖 Read
via "National Vulnerability Database".
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24882 ‼
📖 Read
via "National Vulnerability Database".
Microsoft OneDrive for Android Information Disclosure Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24922 ‼
📖 Read
via "National Vulnerability Database".
Microsoft Dynamics 365 Information Disclosure Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24921 ‼
📖 Read
via "National Vulnerability Database".
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24910 ‼
📖 Read
via "National Vulnerability Database".
Windows Graphics Component Elevation of Privilege Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-27069 ‼
📖 Read
via "National Vulnerability Database".
A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the account name field.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24906 ‼
📖 Read
via "National Vulnerability Database".
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24911 ‼
📖 Read
via "National Vulnerability Database".
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-27585 ‼
📖 Read
via "National Vulnerability Database".
PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to CVE-2022-24793. A patch is available as commit `d1c5e4d` in the `master` branch. A workaround is to disable DNS resolution in PJSIP config (by setting `nameserver_count` to zero) or use an external resolver implementation instead.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23419 ‼
📖 Read
via "National Vulnerability Database".
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25206 ‼
📖 Read
via "National Vulnerability Database".
PrestaShop ws_productreviews < 3.6.2 is vulnerable to SQL Injection.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24909 ‼
📖 Read
via "National Vulnerability Database".
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24930 ‼
📖 Read
via "National Vulnerability Database".
Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24923 ‼
📖 Read
via "National Vulnerability Database".
Microsoft OneDrive for Android Information Disclosure Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-27070 ‼
📖 Read
via "National Vulnerability Database".
A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24919 ‼
📖 Read
via "National Vulnerability Database".
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability📖 Read
via "National Vulnerability Database".
📢 MI5 to establish new security agency to counter Chinese hacking, espionage 📢
📖 Read
via "ITPro".
The new organisation has been compared to GCHQ’s NCSC, and will provide companies advice on how to deal with Chinese companies or carry out business in China📖 Read
via "ITPro".
ITPro
MI5 to establish new security agency to counter Chinese hacking, espionage
The new organisation has been compared to GCHQ’s NCSC, and will provide companies advice on how to deal with Chinese companies or carry out business in China
‼ CVE-2023-28144 ‼
📖 Read
via "National Vulnerability Database".
KDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configuration, allows privilege escalation because of race conditions involving symlinks and elevate_perf_privileges.sh chown calls.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-27589 ‼
📖 Read
via "National Vulnerability Database".
Minio is a Multi-Cloud Object Storage framework. Starting with RELEASE.2020-12-23T02-24-12Z and prior to RELEASE.2023-03-13T19-46-17Z, a user with `consoleAdmin` permissions can potentially create a user that matches the root credential `accessKey`. Once this user is created successfully, the root credential ceases to work appropriately. The issue is patched in RELEASE.2023-03-13T19-46-17Z. There are ways to work around this via adding higher privileges to the disabled root user via `mc admin policy set`.📖 Read
via "National Vulnerability Database".