13556 matches found
CVE-2022-43752
Oracle Solaris version 10 1/13, when using the Common Desktop Environment CDE, is vulnerable to a privilege escalation vulnerability. A low privileged user can escalate to root by crafting a malicious printer and double clicking on the the crafted printer's icon...
CVE-2022-44019
In Total.js 4 before 0e5ace7, /api/common/ping can achieve remote command execution via shell metacharacters in the host parameter...
PT-2022-27081 · Total.Js · Total.Js
Name of the Vulnerable Software and Affected Versions: Total.js versions prior to 0e5ace7 Description: The issue allows remote command execution via shell metacharacters in the host parameter of the "/api/common/ping" API endpoint. Recommendations: For versions prior to 0e5ace7, update to a versi...
CVE-2021-38731
creationtimestamp| type| source ---|---|--- 2022-10-28 20:29:38+00:00| seen| https://t.me/cibsecurity/52226...
DL1 bug fix and enhancement update
An update is available for ipa, python-jwcrypto, custodia, bind-dyndb-ldap, python-qrcode, softhsm, slapi-nis, python-yubico, python-kdcproxy, opendnssec, ipa-healthcheck, pyusb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
ansible-freeipa bug fix and enhancement update
An update is available for ansible-freeipa. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The ansible-freeipa package provides Ansible roles and playbooks to...
container-tools:rhel8 bug fix and enhancement update
An update is available for fuse-overlayfs, container-selinux, udica, containers-common, runc, toolbox, podman, conmon, skopeo, crun, libslirp, oci-seccomp-bpf-hook, python-podman, slirp4netns, containernetworking-plugins, buildah, criu, cockpit-podman. This update affects Rocky Linux 8. A Common...
cockpit bug fix and enhancement update
An update is available for cockpit. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Cockpit enables users to administer GNU/Linux servers using a web browser. It...
Malicious code in tttestsupport-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec247ef9b86fec7b8f1a1487f90871675bf61efd5c6483db68965ad27692f119 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6677 Malicious code in tttestsupport-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec247ef9b86fec7b8f1a1487f90871675bf61efd5c6483db68965ad27692f119 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
firefox security update
An update is available for firefox. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...
Security Bulletin: The IBM® Engineering Lifecycle Management products recommendation for IBM Java XML vulnerability CVE-2022-21299
Summary A flaw in the XML component allows attackers to inflict a denial-of-service and/or access external entities which should be inaccessible. Vulnerability is identified in Java versions 7.0.11.5 and earlier, 7.1.5.5 and earlier, 8.0.7.5 and earlier. Vulnerability Details Refer to the securit...
CVE-2022-41806
creationtimestamp| type| source ---|---|--- 2022-10-20 02:20:47+00:00| seen| https://t.me/cibsecurity/51846 2025-05-08 19:24:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15601...
The vulnerability of the configuration panel of the device information collection tool for Cisco Common Services Platform Collector allows a perpetrator to execute arbitrary code.
The vulnerability of the configuration panel of the Cisco Common Services Platform Collector for collecting device information exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to...
CVE-2022-43409
creationtimestamp| type| source ---|---|--- 2022-10-19 20:15:20+00:00| seen| https://t.me/cibsecurity/51797 2025-10-04 13:26:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m2eonzctamd2...
Exploit for Out-of-bounds Read in Bentley Microstation
CVE-2022-42899 Apache Common Text starting from version 1.5 to...
Vulnerabilities fixed in Oracle PeopleSoft
Vulnerabilities have been fixed in Oracle PeopleSoft. The vulnerabilities allow a malicious party to launch attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Access to sensitive data Oracle has fixed vulnerabilities in the following products:...
CVE-2022-39406
Vulnerability in the PeopleSoft Enterprise Common Components product of Oracle PeopleSoft component: Approval Framework. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...
Design/Logic Flaw
Vulnerability in the PeopleSoft Enterprise Common Components product of Oracle PeopleSoft component: Approval Framework. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...