🕴 Microsoft Azure Shared Key Misconfiguration Could Lead to RCE 🕴
📖 Read
via "Dark Reading".
Azure admins are urged to disable shared key access and implement Azure Active Directory authentication.📖 Read
via "Dark Reading".
Dark Reading
Microsoft Azure Shared Key Misconfiguration Could Lead to RCE
Azure admins are urged to disable shared key access and implement Azure Active Directory authentication.
🕴 Microsoft Patches 97 CVEs, Including Zero-Day & Wormable Bugs 🕴
📖 Read
via "Dark Reading".
The April 2023 Patch Tuesday security update also included a reissue of a fix for a 10-year-old bug that a threat actor recently exploited in the supply chain attack on 3CX.📖 Read
via "Dark Reading".
Dark Reading
Microsoft Patches 97 CVEs, Including Zero-Day & Wormable Bugs
The April 2023 Patch Tuesday security update also included a reissue of a fix for a 10-year-old bug that a threat actor recently exploited in the supply chain attack on 3CX.
‼ CVE-2023-21729 ‼
📖 Read
via "National Vulnerability Database".
Remote Procedure Call Runtime Information Disclosure Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24887 ‼
📖 Read
via "National Vulnerability Database".
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2020-9009 ‼
📖 Read
via "National Vulnerability Database".
The ShipStation.com plugin 1.1 and earlier for CS-Cart allows remote attackers to insert arbitrary information into the database (via action=shipnotify) because access to this endpoint is completely unchecked. The attacker must guess an order number.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24893 ‼
📖 Read
via "National Vulnerability Database".
Visual Studio Code Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24883 ‼
📖 Read
via "National Vulnerability Database".
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24925 ‼
📖 Read
via "National Vulnerability Database".
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28219 ‼
📖 Read
via "National Vulnerability Database".
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25409 ‼
📖 Read
via "National Vulnerability Database".
Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. Restricted users have access to other users outlets.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-21727 ‼
📖 Read
via "National Vulnerability Database".
Remote Procedure Call Runtime Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28284 ‼
📖 Read
via "National Vulnerability Database".
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24884 ‼
📖 Read
via "National Vulnerability Database".
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24885 ‼
📖 Read
via "National Vulnerability Database".
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46396 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28222 ‼
📖 Read
via "National Vulnerability Database".
Windows Kernel Elevation of Privilege Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24886 ‼
📖 Read
via "National Vulnerability Database".
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24912 ‼
📖 Read
via "National Vulnerability Database".
Windows Graphics Component Elevation of Privilege Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24924 ‼
📖 Read
via "National Vulnerability Database".
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26555 ‼
📖 Read
via "National Vulnerability Database".
praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28267 ‼
📖 Read
via "National Vulnerability Database".
Remote Desktop Protocol Client Information Disclosure Vulnerability📖 Read
via "National Vulnerability Database".