13556 matches found
Exploit for Code Injection in Apache Commons_Text
cve-2022-42889 cve-2022-42889 Text4Shell affects Apache C...
New text2shell RCE vulnerability in Apache Common Texts CVE-2022-42889
Yet another RCE with a CVSS score of 9.8 out of 10 was disclosed a few hours ago. This issue looks like the same Log4shell and it seems even more dangerous since Common Texts are used more broadly. The Apache Foundation published a vulnerability in the Apache Commons Text project code and publish...
CVE-2022-39406
Vulnerability in the PeopleSoft Enterprise Common Components product of Oracle PeopleSoft component: Approval Framework. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...
CVE-2022-39406
Vulnerability in the PeopleSoft Enterprise Common Components product of Oracle PeopleSoft component: Approval Framework. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...
CVE-2022-39406
CVE-2022-39406 affects Oracle PeopleSoft 9.2, specifically the Approval Framework in PeopleSoft Enterprise Common Components. The vulnerability is exploitable by a low-privileged attacker over a network via HTTP and can lead to unauthorized creation, deletion, or modification of data, with high c...
Oracle PeopleSoft Enterprise Common Components 安全漏洞
Oracle PeopleSoft Enterprise Common Components are a set of public components from Oracle Corporation USA. A security vulnerability exists in Oracle PeopleSoft Enterprise Common Components. A low-privileged attacker with network access via HTTP could compromise the PeopleSoft Enterprise Common...
CVE-2022-42969
creationtimestamp| type| source ---|---|--- 2022-10-16 12:30:35+00:00| seen| https://t.me/cibsecurity/51527...
AZL-33608 CVE-2022-32149 affecting package libcontainers-common for versions less than 20210626-6
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
AZL-41786 CVE-2022-2879 affecting package libcontainers-common for versions less than 20240213-2
Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics. After fix, Reader.Read limits the maximum size of header blocks to 1 MiB...
libzdnn bug fix and enhancement update
An update is available for libzdnn. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libzdnn package enables user and applications to leverage the zDNN...
Top 5 ransomware detection techniques: Pros and cons of each
In the fight against ransomware, much of the discussion revolves around prevention and response. Actually detecting the ransomware, however, is just as important to securing your business. To understand why, just consider the following example. Lets say youre a farmer taking care of a flock of...
CVE-2022-37975
creationtimestamp| type| source ---|---|--- 2022-10-11 22:32:32+00:00| seen| https://t.me/cibsecurity/51179...
CVE-2022-37997
creationtimestamp| type| source ---|---|--- 2022-10-11 22:26:05+00:00| seen| https://t.me/cibsecurity/51143...
gnutls and nettle security, bug fix, and enhancement update
An update is available for nettle, gnutls. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnutls packages provide the GNU Transport Layer Security GnuTLS...
CVE-2022-2629
creationtimestamp| type| source ---|---|--- 2022-10-11 00:25:32+00:00| seen| https://t.me/cibsecurity/51088...
MAL-2022-1632 Malicious code in bmt-web-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35077ef12023da408992cf0c35a5177c73041bdba780bceb1f4fb2d5a76ed3b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bmt-web-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35077ef12023da408992cf0c35a5177c73041bdba780bceb1f4fb2d5a76ed3b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Cisco IOS XE Software Common Industrial Protocol Request DoS (cisco-sa-iosxe-cip-dos-9rTbKLt9)
A vulnerability in the processing of malformed Common Industrial Protocol CIP packets that are sent to Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to unexpectedly reload, resulting in a denial of service DoS condition...
