Description Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability,
Description The Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass vulnerability. Successful exploitation of this
Description This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets
Description Pre-auth RCE in Apache Ofbiz 18.12.09. It’s due to XML-RPC no longer maintained still present. This issue affects Apache
Description IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper
As the holiday season is upon us and the festivities begin to heat up, at the very least, it also
Description A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2,
Description The improper neutralization of special elements in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542
The Simple Service Discovery Protocol (SSDP) is a network protocol used by devices to discover and communicate with each other
Description Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82
Description SQL injection vulnerability in PrestaShop opartdevis v.4.5.18 thru v.4.6.12 allows a remote attacker to execute arbitrary code via a
Description A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel. This issue
Memcache is a high-performance, distributed memory caching system used to improve website and application performance. It stores frequently accessed data
Description An issue was discovered in Network Optix NxCloud before 23.1.0.40440. It was possible to add a fake VMS server
Description Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to
Description A vulnerability in the web-based management allows an unauthenticated remote attacker to inject arbitrary system commands and gain full
Description A command injection exists in Ray’s cpu_profile URL parameter allowing attackers to execute os commands on the system running
Description There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code
Description SAP Business One installation – version 10.0, does not perform proper authentication and authorization checks for SMB shared folder.
In a TCP (Transmission Control Protocol) connection, a three-way handshake is performed between the client and the server to establish
Description An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users
Prophaze Highlights the Digital Frontline in Israel-Hamas Conflict In recent times, the world has witnessed an alarming surge in Distributed
Description Microsoft Edge (Chromium-based) Information Disclosure Vulnerability. References https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36409 For More Information CVERecord
Description A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. References