‼ CVE-2023-35335 ‼
📖 Read
via "National Vulnerability Database".
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-35317 ‼
📖 Read
via "National Vulnerability Database".
Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33174 ‼
📖 Read
via "National Vulnerability Database".
Windows Cryptographic Information Disclosure Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-35305 ‼
📖 Read
via "National Vulnerability Database".
Windows Kernel Elevation of Privilege Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32047 ‼
📖 Read
via "National Vulnerability Database".
Paint 3D Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-35316 ‼
📖 Read
via "National Vulnerability Database".
Remote Procedure Call Runtime Information Disclosure Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33169 ‼
📖 Read
via "National Vulnerability Database".
Remote Procedure Call Runtime Denial of Service Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33155 ‼
📖 Read
via "National Vulnerability Database".
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32040 ‼
📖 Read
via "National Vulnerability Database".
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23756 ‼
📖 Read
via "National Vulnerability Database".
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS Targeting Non-Script Elements.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29984 ‼
📖 Read
via "National Vulnerability Database".
Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service (DoS) condition. As for the affected products/models/versions, see the detailed information provided by each vendor.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48521 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through 2.11.0-Beta2. It fails to keep track of ordinal numbers when removing fake Authentication-Results header fields, which allows a remote attacker to craft an e-mail message with a fake sender address such that programs that rely on Authentication-Results from OpenDKIM will treat the message as having a valid DKIM signature when in fact it has none.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29406 ‼
📖 Read
via "National Vulnerability Database".
The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value.📖 Read
via "National Vulnerability Database".
♟️ Apple & Microsoft Patch Tuesday, July 2023 Edition ♟️
📖 Read
via "Krebs on Security".
Microsoft Corp. today released software updates to quash 130 security bugs in its Windows operating systems and related software, including at least five flaws that are already seeing active exploitation. Meanwhile, Apple customers have their own zero-day woes again this month: On Monday, Apple issued (and then quickly pulled) an emergency update to fix a zero-day vulnerability that is being exploited on MacOS and iOS devices.📖 Read
via "Krebs on Security".
Krebs on Security
Apple & Microsoft Patch Tuesday, July 2023 Edition
Microsoft Corp. today released software updates to quash 130 security bugs in its Windows operating systems and related software, including at least five flaws that are already seeing active exploitation. Meanwhile, Apple customers have their own zero-day…
👍2
‼ CVE-2023-37766 ‼
📖 Read
via "National Vulnerability Database".
GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_isom_remove_user_data function at /lib/libgpac.so.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24491 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been discovered in the Citrix Secure Access client for Windowswhich, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-37765 ‼
📖 Read
via "National Vulnerability Database".
GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_dump_vrml_sffield function at /lib/libgpac.so.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-3127 ‼
📖 Read
via "National Vulnerability Database".
An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24492 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely execute code if a victim user opens an attacker-crafted link and accepts further prompts.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-37174 ‼
📖 Read
via "National Vulnerability Database".
GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dump_isom_scene function at /mp4box/filedump.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-37767 ‼
📖 Read
via "National Vulnerability Database".
GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the BM_ParseIndexValueReplace function at /lib/libgpac.so.📖 Read
via "National Vulnerability Database".