‼ CVE-2023-2536 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28068 ‼
📖 Read
via "National Vulnerability Database".
Dell Command Monitor, versions 10.9 and prior, contains an improper folder permission vulnerability. A local authenticated malicious user can potentially exploit this vulnerability leading to privilege escalation by writing to a protected directory when Dell Command Monitor is installed to a non-default path📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2537 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.📖 Read
via "National Vulnerability Database".
🕴 Google Expands Passkey Support with Passwordless Authentication 🕴
📖 Read
via "Dark Reading".
One year after Apple, Google and Microsoft pledged to support the FIDO Alliance’s passkeys standard, support is growing, though still early in adoption.📖 Read
via "Dark Reading".
Dark Reading
Google Expands Passkey Support With Passwordless Authentication
One year after Apple, Google and Microsoft pledged to support the FIDO Alliance’s passkeys standard, support is growing, though still early in adoption.
🕴 The (Security) Cost of Too Much Data Privacy 🕴
📖 Read
via "Dark Reading".
The online fraud prevention industry has taken the brunt of increased privacy actions.📖 Read
via "Dark Reading".
Dark Reading
The (Security) Cost of Too Much Data Privacy
The online fraud prevention industry has taken the brunt of increased privacy actions.
🕴 2 Years After Colonial Pipeline, US Critical Infrastructure Still Not Ready for Ransomware 🕴
📖 Read
via "Dark Reading".
Sweeping changes implemented since the May 2021 cyberattack are helping -- but more work remains to be done, security experts say.📖 Read
via "Dark Reading".
Dark Reading
2 Years After Colonial Pipeline, US Critical Infrastructure Still Not Ready for Ransomware
Sweeping changes implemented since the May 2021 cyberattack are helping — but more work remains to be done, security experts say.
👍1
‼ CVE-2023-30242 ‼
📖 Read
via "National Vulnerability Database".
NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/add_ikev2.php.📖 Read
via "National Vulnerability Database".
🕴 New White House AI Initiatives Include AI Software-Vetting Event at DEF CON 🕴
📖 Read
via "Dark Reading".
The Biden administration outlined its plans to ensure responsible AI development — cyber-risk is a core element.📖 Read
via "Dark Reading".
Dark Reading
New White House AI Initiatives Include AI Software-Vetting Event at DEF CON
The Biden administration outlined its plans to ensure responsible AI development — cyber-risk is a core element.
‼ CVE-2022-43919 ‼
📖 Read
via "National Vulnerability Database".
IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow an authenticated attacker with authorization to craft messages to cause a denial of service. IBM X-Force ID: 241354.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29935 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.count(op) && "operation was already replaced.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29932 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22874 ‼
📖 Read
via "National Vulnerability Database".
IBM MQ Clients 9.2 CD, 9.3 CD, and 9.3 LTS are vulnerable to a denial of service attack when processing configuration files. IBM X-Force ID: 244216.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29934 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect().📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30053 ‼
📖 Read
via "National Vulnerability Database".
TOTOLINK A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29939 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnv(mlir::spirv::TargetEnvAttr).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29941 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOp<mlir::sparse_tensor::SortOp>(mlir::sparse_tensor::SortOp.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29933 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30243 ‼
📖 Read
via "National Vulnerability Database".
Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30434 ‼
📖 Read
via "National Vulnerability Database".
IBM Storage Scale (IBM Spectrum Scale 5.1.0.0 through 5.1.2.9, 5.1.3.0 through 5.1.6.1 and IBM Elastic Storage Systems 6.1.0.0 through 6.1.2.5, 6.1.3.0 through 6.1.6.0) could allow a local user to cause a kernel panic. IBM X-Force ID: 252187.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29942 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::Type::isa<mlir::LLVM::LLVMVoidType.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30013 ‼
📖 Read
via "National Vulnerability Database".
TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnerability allows an attacker to execute arbitrary commands through the "command" parameter.📖 Read
via "National Vulnerability Database".