Windows Hyper-V Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows 11 21h2,
Microsoft Windows 10 1809,
Microsoft Windows 10 21h2
... (+3)
Windows Kernel Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows 11 21h2,
Microsoft Windows Server 2022
... (+6)
Windows libarchive Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows 11 22h2,
Microsoft Windows 11 22h2,
Microsoft Windows 11 23h2
... (+1)
Windows libarchive Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows 11 21h2,
Microsoft Windows Server 2022
... (+6)
Windows CoreMessaging Information Disclosure Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2016,
Microsoft Windows Server 2019,
Microsoft Windows 10 1607
... (+8)
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+10)
Windows Themes Information Disclosure Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows 10 1507
... (+12)
Windows Nearby Sharing Spoofing Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows 11 21h2,
Microsoft Windows 10 1809,
Microsoft Windows 10 21h2
... (+3)
Microsoft AllJoyn API Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows 10 1507,
Microsoft Windows 10 1507,
Microsoft Windows 10 1607
... (+10)
Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows 10 1507,
Microsoft Windows 10 1507
... (+11)
Windows Cryptographic Services Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows 10 1507,
Microsoft Windows 10 1507
... (+11)
Windows Subsystem for Linux Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows 11 21h2,
Microsoft Windows 11 21h2,
Microsoft Windows 10 21h2
... (+5)
Windows Message Queuing Client (MSMQC) Information Disclosure
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows 10 1507,
Microsoft Windows 10 1507
... (+17)
A security vulnerability exists in FBX that could lead to remote code execution. To mitigate this vulnerability, the ability to insert FBX files has been disabled in Word, Excel, PowerPoint and Outlook for Windows and Mac. Versions of Office that had this feature enabled will no longer have access t...
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Office Long Term Servicing Channel
Azure Storage Mover Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Azure Storage Mover
Windows Kerberos Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows 10 1507,
Microsoft Windows 10 1507
... (+17)
.NET Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Microsoft .net,
Microsoft .net
BitLocker Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows 10 1507,
Microsoft Windows 10 1507,
Microsoft Windows 10 1607
... (+10)
Microsoft Message Queuing Information Disclosure Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows 10 1507,
Microsoft Windows 10 1507
... (+13)
Windows Message Queuing Client (MSMQC) Information Disclosure
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows 10 1507,
Microsoft Windows 10 1507
... (+13)
Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows 10 1507,
Microsoft Windows 10 1507
... (+11)
Microsoft Message Queuing Information Disclosure Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows 10 1507,
Microsoft Windows 10 1507
... (+11)
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows 10 1507,
Microsoft Windows 10 1507
... (+17)
Windows Group Policy Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows 10 1507,
Microsoft Windows 10 1507
... (+17)
Visual Studio Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Visual Studio,
Microsoft Visual Studio 2017,
Microsoft Visual Studio 2019
... (+3)
Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012
Microsoft ODBC Driver Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows 10 1507,
Microsoft Windows 10 1507
... (+17)
Microsoft Common Log File System Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows 10 1507,
Microsoft Windows 10 1507
... (+17)
Windows HTML Platforms Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows 10 1507,
Microsoft Windows 10 1507
... (+17)
A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This issue can allow local privileged users to rea...
AFFECTED_PRODUCTS:
Linux Linux Kernel,
Linux Linux Kernel
Synopsys Seeker versions prior to 2023.12.0 are vulnerable to a stored cross-site scripting vulnerability through a specially crafted payload.
AFFECTED_PRODUCTS:
Synopsys Seeker
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft .net Framework,
Microsoft .net Framework,
Microsoft .net Framework
... (+17)
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft SQL Server,
Microsoft .net Framework,
Microsoft .net Framework
... (+19)
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been explo...
AFFECTED_PRODUCTS:
Apple macOS,
Apple Iphone Os,
Apple Tvos
... (+2)
In Splunk Enterprise Security (ES) versions lower than 7.1.2, an attacker can create a malformed Investigation to perform a denial of service (DoS). The malformed investigation prevents the generation and rendering of the Investigations manager until it is deleted.<br>The vulnerability requires an a...
AFFECTED_PRODUCTS:
Splunk Enterprise Security
In Splunk Enterprise Security (ES) versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service (DoS) to the Investigation. The attachment endpoint does not properly limit the size of the request which lets an attacker cause the Investigation to become inaccessi...
AFFECTED_PRODUCTS:
Splunk Enterprise Security
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is a duplicate of CVE-2024-0193.
Issue summary: The POLY1305 MAC (message authentication code) implementation
contains a bug that might corrupt the internal state of applications running
on PowerPC CPU based platforms if the CPU provides vector instructions.
Impact summary: If an attacker can influence whether the POLY1305 MAC
alg...
AFFECTED_PRODUCTS:
OpenSSL OpenSSL,
OpenSSL OpenSSL,
OpenSSL OpenSSL
A vulnerability classified as problematic has been found in Totolink T6 4.1.9cu.5241_B20210923. This affects an unknown part of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input showSyslog leads to improper access controls. It is possible to initiate the attack...
AFFECTED_PRODUCTS:
Totolink T6 Firmware
A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452. It has been declared as critical. This vulnerability affects the function formTmultiAP of the file /bin/boa of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack...
AFFECTED_PRODUCTS:
Totolink X2000r Firmware
EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.
AFFECTED_PRODUCTS:
Tianocore Edk2
EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.
AFFECTED_PRODUCTS:
Tianocore Edk2
EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.
AFFECTED_PRODUCTS:
Tianocore Edk2
A buffer overflow vulnerability in TA for Linux and TA for MacOS prior to 5.8.1 allows a local user to gain elevated permissions, or cause a Denial of Service (DoS), through exploiting a memory corruption issue in the TA service, which runs as root. This may also result in the disabling of event re...
AFFECTED_PRODUCTS:
Trellix Agent
A symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January 2024 release allows an authenticated local user to potentially gain an escalation of privileges. This was achieved by adding an entry to the registry under the Trellix ENS registry folder with a symbolic...
AFFECTED_PRODUCTS:
Trellix Anti Malware Engine
A vulnerability was found in Totolink T6 4.1.9cu.5241_B20210923. It has been classified as critical. This affects the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument v41 leads to buffer overflow. It is possible...
AFFECTED_PRODUCTS:
Totolink T6 Firmware
A stored cross-site scripting (XSS) vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field.
AFFECTED_PRODUCTS:
Infoblox Nios
In JetBrains YouTrack before 2023.3.22666 stored XSS via markdown was possible
AFFECTED_PRODUCTS:
Jetbrains Youtrack