Fedora 37 : vtk (2023-2cf9dd7d52)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-2cf9dd7d52 advisory. - There is a NULL pointer dereference vulnerability in VTK ...

Continue Reading

CVSS3 - HIGH

CVE-2023-1387

Grafana is an open-source platform for monitoring and observability. Starting with the 9.1 branch, Grafana introduced the ability to search for a JWT in the URL query parameter auth_token and use it a ...

Continue Reading

CVSS3 - HIGH

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : maven and recommended update for antlr3, minlog, sbt, xmvn (SUSE-SU-2023:2097-1)

The remote SUSE Linux SLED15 / SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2097-1 advisory. - In logback version 1.2.7 and ...

Continue Reading

CVSS3 - MEDIUM

CVSS2 - HIGH

Microsoft Remote Desktop App Information Disclosure (May 2023)

The Microsoft Remote Desktop Windows Store App installed on the remote host is prior to 10.2.3006.0. It is, therefore, affected by an information disclosure vulnerability. When an Microsoft Remote Des ...

Continue Reading

CVSS3 - MEDIUM

OpenStack Neutron vulnerabilities

## Releases * Ubuntu 22.04 LTS * Ubuntu 20.04 LTS * Ubuntu 18.04 ESM ## Packages * neutron - OpenStack Virtual Network Service David Sinquin discovered that OpenStack Neutron incorrectly handl ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - MEDIUM

Experts Detail New Zero-Click Windows Vulnerability for NTLM Credential Theft

[![Zero-Click Windows Vulnerability](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=)]() Cybersecurity researchers have shared detail ...

Continue Reading

CVSS3 - CRITICAL

CVE-2023-25833

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.0 and below that may allow a remote, authenticated attacker to create a crafted link which when clicked could render arbi ...

Continue Reading

CVSS3 - MEDIUM

Security Update for SysInternals Sysmon (May 2023)

The SysInternals Sysmon application installed on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - An elevation of privilege vulnerability. A ...

Continue Reading

CVSS3 - HIGH

Back to Main

Subscribe for the latest news: