Do Son The exploitation of the CVE-2023-28787 vulnerability could allow a malicious actor to directly interact with a website's database
Vulnerability
CVE-2023-30547 flaw could enable attackers to break out of security boundaries and execute arbitrary shellcodes.
CVE-2023-2002 has been identified within the Linux kernel, posing a significant risk to systems that utilize Bluetooth communication
The CVE-2023-20862 vulnerability arises when the logout support does not properly clean the security context if using serialized sessions.
CVE-2019-8526 allows a local attacker to obtain elevated privileges by exploiting a use-after-free issue in the Security component
A new security flaw (CVE-2023-1998) in the Linux kernel has come to light, which affects the way the kernel handles Spectre v2 mitigations
CVE-2023-0896, (CVSS score of 9.8), is a hard-coded password flaw found in the SSH & telnet functionality of the Lenovo Smart Clock Essential
CVE-2023-22946 arises when applications use the spark-submit feature to specify a 'proxy-user' to run as, which limits privileges
CVE-2023-2033, is a type confusion issue in the V8 JavaScript engine, and Google has already released an emergency update to protect users
Recently, a high-severity vulnerability, CVE-2023-20863, was discovered that may expose Java applications to denial-of-service (DoS) attacks.
CVE-2023-1874 affects versions up to and including 5.3.7 and enables authenticated attackers to grant themselves administrative privileges
CVE-2023-1912, unauthenticated stored XSS vulnerability has been identified in the popular WordPress plugin Limit Login Attempts
The vulnerability, dubbed CVE-2023-29199, affects VM2 versions up to 3.9.15 and resides in the library's source code transformer
CVE-2023-1281 is a race condition vulnerability leading to a use-after-free when updating imperfect hash filters
OpenAI announced a collaboration with a platform to launch a bug bounty program, inviting security researchers to actively discover
The CVE-2023-28252 zero-day was used to deploy the Nokoyawa ransomware. Attackers primarily used the elevation-of-privilege exploits
CVE-2023-28252 is currently under active attack. An attacker who successfully exploited this vulnerability could gain SYSTEM privileges
To protect your Apache InLong deployment from the CVE-2023-30465 vulnerability, users are advised to take the following actions
Lexmark has recently released a series of security firmware updates to address multiple vulnerabilities in over 100 of their printer models
CVE-2023-27497 (CVSS score of 10), a flaw in the SAP Diagnostics Agent (OSCommand Bridge and EventLogServiceCollector)
Discoveries have exposed several important security vulnerabilities in Apache Linkis that need to be addressed in order to ensure the continued safety
The security researcher @LinusHenze unveiled a PoC exploit for the CVE-2023-28206 flaw, revealing an out-of-bounds memory move