Microsoft Office Visio Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Office Long Term Servicing Channel,
Microsoft Office Long Term Servicing Channel
Microsoft Excel Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Excel,
Microsoft Office Long Term Servicing Channel
... (+1)
Microsoft SharePoint Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft SharePoint Server,
Microsoft SharePoint Server
Windows Kernel Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows 10 1809,
Microsoft Windows 10 21h2
... (+1)
Windows Common Log File System Driver Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+15)
Windows Resilient File System (ReFS) Information Disclosure Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows 11 22h2,
Microsoft Windows 11 23h2,
Microsoft Windows Server 2022 23h2
... (+1)
DeepSpeed Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Deepspeed
Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.
.NET and Visual Studio Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Microsoft .net,
Microsoft .net,
Microsoft Visual Studio 2022
... (+3)
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Microsoft .net Framework,
Microsoft .net Framework,
Microsoft .net Framework
... (+14)
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Microsoft .net Framework,
Microsoft .net Framework,
Microsoft .net Framework
... (+14)
Power BI Report Server Spoofing Vulnerability
AFFECTED_PRODUCTS:
Microsoft Power Bi Report Server
Azure Service Fabric for Linux Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Azure Service Fabric,
Microsoft Azure Service Fabric,
Microsoft Azure Service Fabric
Microsoft Configuration Manager Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Configuration Manager,
Microsoft Configuration Manager,
Microsoft Configuration Manager
Windows Remote Desktop Services Tampering Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+3)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+3)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+3)
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+3)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+3)
.NET and Visual Studio Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft .net,
Microsoft Visual Studio 2022,
Microsoft Visual Studio 2022
... (+2)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+3)
Azure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege Vulnerability
BranchCache Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+15)
Windows Kerberos Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2022 23h2
Windows Netlogon Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+3)
Azure Monitor Agent Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Azure Monitor Agent
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2022 23h2
Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+22)
Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+14)
Windows Kernel Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+1)
Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+14)
NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 and 7.0 could allow an attacker with local access to cause a denial-of-service condition in the context of the Networking Stack process.
Windows Hyper-V Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2016,
Microsoft Windows Server 2019,
Microsoft Windows 10 1507
... (+9)
An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service (ReDOS) via supplying a crafted string.
Windows Hyper-V Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows 11 21h2,
Microsoft Windows Server 2022
... (+7)
A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling request with an ASCII control character is sent, it causes the Netty HttpObjectDecoder to transition into a BAD_MESSAGE state. As a result, any...
A vulnerability was found in Quarkus CXF. Passwords and other secrets may appear in the application log in spite of the user configuring them to be hidden. This issue requires some special configuration to be vulnerable, such as SOAP logging enabled, application set client, and endpoint logging pro...
A flaw was found in Event-Driven Automation (EDA) in Ansible Automation Platform (AAP), which lacks encryption of sensitive information. An attacker with network access could exploit this vulnerability by sniffing the plaintext data transmitted between the EDA and AAP. An attacker with system access...
Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions.
AFFECTED_PRODUCTS:
Ivanti Endpoint Manager Cloud Services Appliance
An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution.
AFFECTED_PRODUCTS:
Ivanti Endpoint Manager Cloud Services Appliance
SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.
AFFECTED_PRODUCTS:
Ivanti Endpoint Manager Cloud Services Appliance
Under specific circumstances, insecure permissions in Ivanti Velocity License Server before version 5.2 allows a local authenticated attacker to achieve local privilege escalation.
AFFECTED_PRODUCTS:
Ivanti Velocity License Server
A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 600T. If the device is overloaded with requests, it will become unavailable. The device may require a power cycle to recover it if it does not re-establish a connection after it stops receiving requests.
AFFECTED_PRODUCTS:
Rockwellautomation Powerflex 6000t Firmware,
Rockwellautomation Powerflex 6000t Firmware,
Rockwellautomation Powerflex 6000t Firmware
Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a p...
AFFECTED_PRODUCTS:
Rockwellautomation Compactlogix 5380 Firmware,
Rockwellautomation Controllogix 5580 Firmware,
Rockwellautomation Guardlogix 5580 Firmware
... (+3)
Insecure permissions in Ivanti EPMM before 12.1.0.4 allow a local authenticated attacker to modify sensitive application components.
AFFECTED_PRODUCTS:
Ivanti Endpoint Manager Mobile,
Ivanti Endpoint Manager Mobile
Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information
AFFECTED_PRODUCTS:
Ivanti Avalanche
Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.
AFFECTED_PRODUCTS:
Ivanti Avalanche
Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.
AFFECTED_PRODUCTS:
Ivanti Avalanche
Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information.
AFFECTED_PRODUCTS:
Ivanti Avalanche
A NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to cause a denial of service.
AFFECTED_PRODUCTS:
Ivanti Avalanche