CVSS3 - HIGH - API Security Blog

Post ContentRead More ...

February 23, 2023

Fedora 36 : 1:openssl (2023-a5564c0a3f)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-a5564c0a3f advisory. - A timing based side channel exists in the OpenS ...

February 22, 2023

Microsoft Print 3D app Remote Code Execution (February 2023)

The Microsoft Print 3D app installed on the remote Windows host may be affected by a remote code execution vulnerability. Note that Nessus has not tested for these issues but has instead relied only o ...

February 20, 2023

Security Updates for Microsoft .NET Framework (February 2023)

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows: - A denial of service (DoS) vulnerabili ...

February 18, 2023

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products

## Summary Vulnerabilities in the IBMÂ® Runtime Environment Javaâ¢ Technology Edition affect IBM SAN Volume Controller, IBM Storwize V7000, V5000, V3700 and V3500, IBM Spectrum Virtualize Softwa ...

February 17, 2023

Microsoft 3D Builder app Multiple Remote Code Execution Vulnerabilities (February 2023)

The version of the Microsoft 3D Builder app installed on the remote Windows host is prior to 20.0.3.0. It is, therefore, affected by multiple unspecified remote code execution vulnerabilities. Note th ...

February 16, 2023

Wordfence Intelligence CE Weekly Vulnerability Report (Feb 6, 2023 to Feb 12, 2023)

In case you missed it, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as [Wordfence Intelligence Community Edit ...

February 16, 2023

Description of the security update for SharePoint Enterprise Server 2016: February 14, 2023 (KB5002350)

None ## Summary This security update resolves a Microsoft SharePoint Server elevation of privilege vulnerability. To learn more about the vulnerability, see âââââââ[ ...

February 16, 2023

Privilege Escalation

jeecg-boot-base-core is vulnerable to Privilege Escalation. The vulnerability exists due to the lack of permission checks in the library, which allows an attacker to gain escalated privilege and view ...

February 15, 2023

Privilege Escalation

jeecg-boot-base-core is vulnerable to Privilege Escalation. The vulnerability exists due to the lack of permission checks in the library, which allows an attacker to gain escalated privileges and view ...

February 15, 2023