39 matches found
CVE-2023-22002
CVE-2023-22002 affects Oracle VM VirtualBox Core. Affected versions are prior to 6.1.44 and prior to 7.0.8. The issue is described as easily exploitable by a high-privilege attacker with local access to the host running VirtualBox, potentially leading to unauthorized access to data across Oracle ...
CVE-2023-22002
...
KLA48969 Multiple vulnerabilities in Oracle VirtualBox
Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Code execution vulnerability ...
Zoom Client for Meetings < 5.6.3 Vulnerability (ZSB-22002)
The version of Zoom Client for Meetings installed on the remote host is prior to 5.6.3. It is, therefore, affected by a vulnerability as referenced in the ZSB-22002 advisory. - The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions...
CVE-2022-22002
Windows User Account Profile Picture Denial of Service Vulnerability...
CVE-2022-22002
Technical details for CVE-2022-22002 are not publicly provided in the connected documents. Available sources mention the vulnerability title, but no affected products, root cause, impact, or fixes are included here. Monitor for updates.
KB5010392: Windows Server 2012 Security Update (February 2022)
The remote Windows host is missing security update 5010412. It is, therefore, affected by multiple vulnerabilities - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-21993, CVE-2022-21998 - A denial of service DoS...
KB5010345: Windows 10 version 1909 Security Update (February 2022)
The remote Windows host is missing security update 5010345. It is, therefore, affected by multiple vulnerabilities - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-21993, CVE-2022-21998 - A denial of service DoS...
KB5010358: Windows 10 LTS 1507 Security Update (February 2022)
The remote Windows host is missing security update 5010358. It is, therefore, affected by multiple vulnerabilities - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-21993, CVE-2022-21998 - A denial of service DoS...
KB5010351: Windows 10 version 1809 / Windows Server 2019 Security Update (February 2022)
The remote Windows host is missing security update 5010351. It is, therefore, affected by multiple vulnerabilities %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid157432; scriptversion"1.17";...
KB5010403: Windows Server 2008 Security Update (February 2022)
The remote Windows host is missing security update 5010403. It is, therefore, affected by multiple vulnerabilities - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-21993, CVE-2022-21998 - A denial of service DoS...
KB5010422: Windows 7 and Windows Server 2008 R2 Security Update (February 2022)
The remote Windows host is missing security update 5010422. It is, therefore, affected by multiple vulnerabilities - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-21998 - A denial of service DoS vulnerability. An...
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows. The vulnerabilities potentially enable a malicious person to launch attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root rights Remote code execution User rights...
CVE-2021-22002
creationtimestamp| type| source ---|---|--- 2021-09-01 02:33:55+00:00| seen| https://t.me/cibsecurity/28141...
CVE-2021-22002
CVE-2021-22002 affects VMware Workspace ONE Access and Identity Manager. The flaw allows tampering with host headers to access the /cfg web app and diagnostic endpoints over port 443, bypassing authentication for those resources. The root cause is improper validation of host headers that enables ...
VMware Workspace One Access / VMware Identity Manager Multiple Vulnerabilities (VMSA-2021-0016)
The VMware Workspace One Access formerly VMware Identity Manager application running on the remote host is affected by the following vulnerabilities: - A security bypass vulnerability exists in due to improper validation of host headers. An unauthenticated, remote attacker can exploit this, via a...
VMware Issues Patches to Fix Critical Bugs Affecting Multiple Products
VMware has released security updates for multiple products to address a critical vulnerability that could be exploited to gain access to confidential information. Tracked as CVE-2021-22002 CVSS score: 8.6 and CVE-2021-22003 CVSS score: 3.7, the flaws affect VMware Workspace One Access Access,...
VMSA-2021-0016:VMware Workspace ONE Access, Identity Manager and vRealize Automation address multiple vulnerabilities
Advisory ID: VMSA-2021-0016.2 CVSSv3 Range: 3.7-8.6 Issue Date:2021-08-05 Updated On: 2021-11-12 CVEs: CVE-2021-22002, CVE-2021-22003 Synopsis: VMware Workspace ONE Access, Identity Manager and vRealize Automation address multiple vulnerabilities CVE-2021-22002, CVE-2021-22003 RSS Feed Download P...
CVE-2020-22002
CVE-2020-22002 – Inim Electronics SmartLiving SmartLAN/G/SI (<=6.x) suffers an unauthenticated SSRF in GetImage where the application uses user-supplied GET parameter host to construct an image request via onvif.cgi without validating the value. The root cause is lack of input validation on ho...