Mozilla Thunderbird Security Advisory (MFSA2022-22) - Windows

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

CVE-2022-31604

creationtimestamp| type| source ---|---|--- 2022-07-01 22:40:07+00:00| seen| https://t.me/cibsecurity/45519...

CVE-2022-32047

creationtimestamp| type| source ---|---|--- 2022-07-01 22:39:43+00:00| seen| https://t.me/cibsecurity/45502...

CISA Adds Eight Known Exploited Vulnerabilities to Catalog  

CISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly...

CVE-2022-1518 3.2.2 IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-22

LRM contains a directory traversal vulnerability that can allow a malicious actor to upload outside the intended directory structure...

QNAP QTS RCE Vulnerability (QSA-22-20)

QNAP QTS is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts";...

all4sport.co.il Cross Site Scripting vulnerability OBB-2667044

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-23080

creationtimestamp| type| source ---|---|--- 2022-06-22 20:33:45+00:00| seen| https://t.me/cibsecurity/44949...

CVE-2022-32549

creationtimestamp| type| source ---|---|--- 2022-06-22 18:28:37+00:00| seen| https://t.me/cibsecurity/44945...

CVE-2022-23081

In openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 are vulnerable to Reflected XSS...

CVE-2022-23079

creationtimestamp| type| source ---|---|--- 2022-06-22 16:28:32+00:00| seen| https://t.me/cibsecurity/44935...

CVE-2022-23077

creationtimestamp| type| source ---|---|--- 2022-06-22 16:28:31+00:00| seen| https://t.me/cibsecurity/44934...

drinkwisecompany.com Cross Site Scripting vulnerability OBB-2663531

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-32444

creationtimestamp| type| source ---|---|--- 2022-06-17 20:22:55+00:00| seen| https://t.me/cibsecurity/44746...

CVE-2022-32547

creationtimestamp| type| source ---|---|--- 2022-06-16 22:20:49+00:00| seen| https://t.me/cibsecurity/44673...

CVE-2022-20131

creationtimestamp| type| source ---|---|--- 2022-06-15 16:20:22+00:00| seen| https://t.me/cibsecurity/44495...

Mitsubishi Electric MELSEC iQ-R, Q, L Series and MELIPC Series (Update C)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low attack complexity Vendor : Mitsubishi Electric Equipment : MELSEC iQ-R, Q, and L Series CPU Module; MELIPC Series CPU Vulnerability : Improper Resource Locking 2. RISK EVALUATION Successful exploitation of this vulnerability...

Siemens SCALANCE LPE9403 Third-Party Vulnerabilities

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely, low attack complexity Vendor: Siemens Equipment: SCALANCE LPE9403 Vulnerabilities: Multiple 2. RISK EVALUATION Successful exploitation of these vulnerabilities could cause crashes and unrestricted file access, impacting the...

Rockwell Automation Logix Controllers Uncontrolled Resource Consumption (CVE-2022-1797)

The remote OT product is vulnerable as specified in advisory ICSA-22-144-01. - A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of- service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the targe...

CISA Adds Three Known Exploited Vulnerabilities to Catalog  

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly...