SUSE CVE-2017-5465

An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could then displayed. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and...

SUSE CVE-2017-5468

An issue with incorrect ownership model of "privateBrowsing" information exposed through developer tools. This can result in a non-exploitable crash when manually triggered during debugging. This vulnerability affects Firefox 53...

SUSE CVE-2017-5467

A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This vulnerability affects Thunderbird 52.1, Firefox ESR 52.1, and Firefox 53...

Why FedRAMP High Authorization Can Ensure High Cybersecurity Maturity

The Federal Risk and Authorization Management Program FedRAMP is a U.S. government initiative that promotes the adoption of secure cloud services across the U.S. federal government by providing a standardized approach to security and risk assessment for cloud technologies. FedRAMP reduces...

CVE-2022-37308

creationtimestamp| type| source ---|---|--- 2022-12-26 07:40:46+00:00| seen| https://t.me/cibsecurity/55341 2025-04-14 14:53:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11621...

Mozilla Thunderbird < 102.6

The version of Thunderbird installed on the remote Windows host is prior to 102.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-53 advisory. - A use-after-free in WebGL extensions could have led to a potentially exploitable crash. CVE-2022-46882 - A missing...

Russian Hackers Spotted Targeting U.S. Military Weapons and Hardware Supplier

A state-sponsored hacking group with links to Russia has been linked to attack infrastructure that spoofs the Microsoft login page of Global Ordnance, a legitimate U.S.-based military weapons and hardware supplier. Recorded Future attributed the new infrastructure to a threat activity group it...

CVE-2022-38808

creationtimestamp| type| source ---|---|--- 2022-09-16 18:28:53+00:00| seen| https://t.me/cibsecurity/49913...

Adobe InCopy < 16.4.3 / 17.0 < 17.4.0 Multiple Vulnerabilities (APSB22-53)

The version of Adobe InCopy installed on the remote host is prior to 16.4.3, 17.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-53 advisory. - Adobe InCopy version 17.3 and earlier and 16.4.2 and earlier are affected by a Heap-based Buffer Overflow...

CVE-2022-35283

creationtimestamp| type| source ---|---|--- 2022-07-14 20:32:53+00:00| seen| https://t.me/cibsecurity/46264...

Unpatched DNS Related Vulnerability Affects a Wide Range of IoT Devices

Cybersecurity researchers have disclosed an unpatched security vulnerability that could pose a serious risk to IoT products. The issue, which was originally reported in September 2021, affects the Domain Name System DNS implementation of two popular C libraries called uClibc and uClibc-ng that ar...

A survey of FedRAMP’s new supply chain requirements

Over the past few years, supply chain management has shifted from a background requirement that everyone unknowingly relies upon, to being a commonly talked about aspect of our everyday lives. The Federal government has ramped up its effort to gain a handle on supply chain threats as a result of...

CVE-2017-16844 affecting package procmail for versions less than 3.22-53

CVE-2017-16844 affecting package procmail for versions less than 3.22-53. A patched version of the package is available...

CVE-2014-3618 affecting package procmail for versions less than 3.22-53

CVE-2014-3618 affecting package procmail for versions less than 3.22-53. A patched version of the package is available...

CVE-2017-16844 affecting package procmail for versions less than 3.22-53

CVE-2017-16844 affecting package procmail for versions less than 3.22-53. A patched version of the package is available...

CVE-2021-44321

creationtimestamp| type| source ---|---|--- 2022-03-04 16:26:53+00:00| seen| https://t.me/cibsecurity/38415...

Meet FedRAMP Compliance with Qualys Cloud Platform

FedRAMP compliance is not without its challenges. Learn about some of the major security controls and how the Qualys Cloud Platform can help achieve FedRAMP authorization. What is FedRAMP? The Federal Risk and Authorization Management Program FedRAMP is a U.S. government program that promotes the...

CVE-2021-46250

creationtimestamp| type| source ---|---|--- 2022-02-16 02:34:53+00:00| seen| https://t.me/cibsecurity/37549...

CVE-2022-22765

creationtimestamp| type| source ---|---|--- 2022-02-14 14:32:53+00:00| seen| https://t.me/cibsecurity/37396...

CVE-2022-0483

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...