CVE-2022-42769

creationtimestamp| type| source ---|---|--- 2022-12-06 12:54:40+00:00| seen| https://t.me/cibsecurity/54053...

CVE-2022-4293

creationtimestamp| type| source ---|---|--- 2022-12-05 22:40:07+00:00| seen| https://t.me/cibsecurity/54020...

Design/Logic Flaw

The Automox Agent before 40 on Windows incorrectly sets permissions on key files...

lomies.shop Cross Site Scripting vulnerability OBB-2981554

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mozilla Firefox Security Advisory (MFSA2022-40) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2022-40. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Mozilla Firefox Security Advisory (MFSA2022-40) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Adobe Experience Manager 6.5.0.0 < 6.5.14.0 Multiple Vulnerabilities (APSB22-40)

The version of Adobe Experience Manager installed on the remote host is prior to 6.5.14.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-40 advisory. - Adobe Experience Manager versions 6.5.13.0 and earlier is affected by a reflected Cross-Site Scripting XSS...

CVE-2022-36186

creationtimestamp| type| source ---|---|--- 2022-08-17 18:40:24+00:00| seen| https://t.me/cibsecurity/48282...

Input validation

Insufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows an authenticated and authorised user to import a project that includes branch names which are 40 hexadecimal characters, which could be abused in supply...

CVE-2022-34529

creationtimestamp| type| source ---|---|--- 2022-07-27 18:52:40+00:00| seen| https://t.me/cibsecurity/47105...

Bently Nevada 3701/40 和 60M100 (3701/60) 信任管理问题漏洞

The Baker Hughes Bently Nevada 3701/40 and the Bently Nevada 60M100 3701/60 are both a Condition Detection System from Baker Hughes USA. A trust management issue vulnerability exists in the Bently Nevada 3701/40 and 60M100 3701/60 versions, which stems from the fact that the affected products hav...

CVE-2022-31604

creationtimestamp| type| source ---|---|--- 2022-07-01 22:40:07+00:00| seen| https://t.me/cibsecurity/45519...

CVE-2022-34495

creationtimestamp| type| source ---|---|--- 2022-06-26 20:33:40+00:00| seen| https://t.me/cibsecurity/45159...

CVE-2022-30659

creationtimestamp| type| source ---|---|--- 2022-06-16 20:27:40+00:00| seen| https://t.me/cibsecurity/44650...

May 24, 2022—KB5014022 (OS Build 17763.2989) Preview

None None...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM InfoSphere Global Name Management (CVE-2019-2769, CVE-2019-2762, CVE-2019-2816).

Summary There are multiple vulnerabilities in the IBM Java SDK that is used by IBM WebSphere Application Server shipped as part of IBM InfoSphere Global Name Management. Vulnerability Details Refer to the security bulletinss listed in the Remediation/Fixes section Affected Products and Versions...

Metabase 信息泄露漏洞

Metabase is an open source data analytics platform from US-based Metabase, Inc. Metabase suffers from an information disclosure vulnerability that stems from having a proxy that is used to load JSON-mapped arbitrary URLs as part of our GeoJSON support. While we perform validation to not return th...

Metabase 跨站脚本漏洞

Metabase is an open source data analytics platform from Metabase, Inc. A cross-site scripting vulnerability exists in Metabase, which originates from an internal development endpoint that could allow cross-site scripting XSS attacks. The following products and versions are affected: x.42 - x.42.3...

AZL-44181 CVE-2018-25032 affecting package clucene 2.3.3.4-40

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

top-40.nl Improper Access Control vulnerability OBB-2441099

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...