CVE-2022-21622: Undefined Security Weakness

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Adapters. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. Successf...

Researchers Uncover Covert Attack Campaign Targeting Military Contractors

A new covert attack campaign singled out multiple military and weapons contractor companies with spear-phishing emails to trigger a multi-stage infection process designed to deploy an unknown payload on compromised machines. The highly-targeted intrusions, dubbed STEEPMAVERICK by Securonix, also...

CVE-2022-37724

Project Wonder WebObjects 1.0 through 5.4.3 is vulnerable to Arbitrary HTTP Header injection and URL- or Header-based XSS reflection in all web-server adaptor interfaces...

Project Wonder 跨站脚本漏洞

Project Wonder is an open source collection of reusable WebObjects frameworks, applications and extensions open sourced by the WOCommunity Association. A security vulnerability exists in Project Wonder versions 1.0 through 5.4.3 that stems from vulnerability to arbitrary HTTP header injection and...

Ubuntu 18.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-5603-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5603-1 advisory. Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A...

EtherNet/IP Buffer Overflow DoS

The vulnerabilities of EtherNet/IP adaptation programs EADK, EtherNet/IP scanners EDKS, and EtherNet/IP DLL adapters EIPA are related to writing beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow a malicious actor to cause service failure by sending specially craft...

CVE-2021-33126

Improper access control in the firmware for some IntelR 700 and 722 Series Ethernet Controllers and Adapters before versions 8.5 and 1.5.5 may allow a privileged user to potentially enable denial of service via local access...

CVE-2021-33126: Undefined Security Weakness

Improper access control in the firmware for some IntelR 700 and 722 Series Ethernet Controllers and Adapters before versions 8.5 and 1.5.5 may allow a privileged user to potentially enable denial of service via local access...

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2022-2257)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable...

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2022-2273)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enabl...

Intel Ethernet Controllers and Adapters Advisory - Lenovo Support US

No description provided...

PT-2022-4224

Name of the Vulnerable Software and Affected Versions IntelR 700 and 722 Series Ethernet Controllers and Adapters versions prior to 8.5 and 1.5.5 Description The issue is related to improper access control in the firmware of the affected devices, which may allow a privileged user to enable denial...

Realtek USB network adapter API DoS

The vulnerability of the API interface of Realtek USB network adapter drivers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Malicious code in realm-postgres-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware daf91dad400c5ac4549be339b95e4daf9f243e91e319647ba513b0e799302fbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5706 Malicious code in realm-postgres-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware daf91dad400c5ac4549be339b95e4daf9f243e91e319647ba513b0e799302fbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scopely-mopub-aacebookaudiencenetwork-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aee14242e10a022c5151238ed0900d84007af9d10e3916aa39cc78066f58e2cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2415 Malicious code in defillama-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ef7aa8bba103fb56a7de97a2cdea32e904b12f16b59b373d57f365467389a3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in defillama-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ef7aa8bba103fb56a7de97a2cdea32e904b12f16b59b373d57f365467389a3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE SLES12 Security Update : kernel (SUSE-SU-2022:2080-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2080-1 advisory. - In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a...

SUSE: Security Advisory (SUSE-SU-2022:2078-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...