CVE-2022-28444

creationtimestamp| type| source ---|---|--- 2022-04-22 00:27:27+00:00| seen| https://t.me/cibsecurity/41281...

CVE-2022-28426

creationtimestamp| type| source ---|---|--- 2022-04-22 00:27:23+00:00| seen| https://t.me/cibsecurity/41276...

CVE-2022-28427

creationtimestamp| type| source ---|---|--- 2022-04-22 00:27:20+00:00| seen| https://t.me/cibsecurity/41274...

CVE-2022-28443

creationtimestamp| type| source ---|---|--- 2022-04-22 00:27:15+00:00| seen| https://t.me/cibsecurity/41272...

CVE-2022-28437

creationtimestamp| type| source ---|---|--- 2022-04-22 00:27:13+00:00| seen| https://t.me/cibsecurity/41270...

CVE-2022-28435

creationtimestamp| type| source ---|---|--- 2022-04-22 00:27:13+00:00| seen| https://t.me/cibsecurity/41269...

CVE-2022-28434

creationtimestamp| type| source ---|---|--- 2022-04-22 00:27:09+00:00| seen| https://t.me/cibsecurity/41268...

CVE-2022-28015

creationtimestamp| type| source ---|---|--- 2022-04-22 00:27:06+00:00| seen| https://t.me/cibsecurity/41265...

CVE-2022-20783

creationtimestamp| type| source ---|---|--- 2022-04-21 22:27:18+00:00| seen| https://t.me/cibsecurity/41260 2022-04-22 15:47:15+00:00| seen| https://t.me/itsecnews/528...

CVE-2022-1039 ICSA-22-104-03 Red Lion DA50N

The weak password on the web user interface can be exploited via HTTP or HTTPS. Once such access has been obtained, the other passwords can be changed. The weak password on Linux accounts can be accessed via SSH or Telnet, the former of which is by default enabled on trusted interfaces. While the...

CVE-2021-43933 ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform

The affected product is vulnerable to a network-based attack by threat actors sending unimpeded requests to the receiving server, which could cause a denial-of-service condition due to lack of heap memory resources...

CVE-2021-43986 ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform

The setup program for the affected product configures its files and folders with full access, which may allow unauthorized users permission to replace original binaries and achieve privilege escalation...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly...

FANUC ROBOGUIDE Simulation Platform

1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: FANUC Corporation / FANUC America Corporation Equipment: ROBOGUIDE Vulnerabilities: Incorrect Permission Assignment for Critical Resource, Improper Access Control, Path Traversal, Improper Restriction o...

CVE-2022-24479

creationtimestamp| type| source ---|---|--- 2022-04-15 22:34:09+00:00| seen| https://t.me/cibsecurity/40959...

CVE-2021-44486

creationtimestamp| type| source ---|---|--- 2022-04-15 22:34:07+00:00| seen| https://t.me/cibsecurity/40957...

CVE-2021-44503

creationtimestamp| type| source ---|---|--- 2022-04-15 22:26:39+00:00| seen| https://t.me/cibsecurity/40924...

CISA Adds Nine Known Exploited Vulnerabilities to Catalog

CISA has added nine new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly add...

CVE-2022-21154

An integer overflow vulnerability exists in the fltSaveCMP functionality of Leadtools 22. A specially-crafted BMP file can lead to an integer overflow, that in turn causes a buffer overflow. An attacker can provide a malicious BMP file to trigger this vulnerability...

CVE-2022-21154

Leadtools 22 contains an integer overflow in the fltSaveCMP path when processing BMPs, caused by computing BytesPerLine for image width/bit-depth and performing a 32-bit multiply during allocation (buffer can overflow). Talos details show the vulnerability arises while copying data during save bi...