Important: Red Hat Security Advisory: cups security update

An update for cups is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

AXIS Network cameras 安全漏洞

AXIS Network cameras are webcams from the Swedish company AXIS. A security vulnerability exists in AXIS Network cameras P1204, P3225, P3367, M3045, M3005, and M3007, which stems from improper privilege management in component CGI scripts...

The vulnerability in the web interface for managing device information on the Cisco Common Services Platform Collector allows a attacker to carry out cross-site scripting attacks.

The vulnerability in the web interface for collecting device information on the Cisco Common Services Platform Collector exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a...

The vulnerability in the web interface for managing device information on the Cisco Common Services Platform Collector allows a attacker to carry out cross-site scripting attacks.

The vulnerability in the web interface for collecting device information on the Cisco Common Services Platform Collector exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a...

The vulnerability in the web interface for managing device information on the Cisco Common Services Platform Collector allows a attacker to carry out cross-site scripting attacks.

The vulnerability in the web interface for collecting device information on the Cisco Common Services Platform Collector exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a...

VulnCheck KEV: CVE-2021-43226

Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms...

VulnCheck KEV: CVE-2021-43207

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

People’s Republic of China State-Sponsored Cyber Actors Exploit Network Providers and Devices

Summary Best Practices • Apply patches as soon as possible • Disable unnecessary ports and protocols • Replace end-of-life infrastructure • Implement a centralized patch management system This joint Cybersecurity Advisory describes the ways in which People’s Republic of China PRC state-sponsored...

CVE-2022-25804

creationtimestamp| type| source ---|---|--- 2022-06-09 07:32:53+00:00| seen| https://t.me/cibsecurity/44067...

CVE-2021-35530

creationtimestamp| type| source ---|---|--- 2022-06-08 00:31:25+00:00| seen| https://t.me/cibsecurity/43981...

CVE-2022-30735

creationtimestamp| type| source ---|---|--- 2022-06-07 22:37:27+00:00| seen| https://t.me/cibsecurity/43970...

CVE-2021-41932

creationtimestamp| type| source ---|---|--- 2022-06-06 18:29:59+00:00| seen| https://t.me/cibsecurity/43847...

DEBIAN-CVE-2022-32296

The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 "Double-Hash Port Selection Algorithm" of RFC 6056...

CVE-2020-25577

creationtimestamp| type| source ---|---|--- 2022-06-03 18:54:52+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2592 2026-09-01 17:01:04+00:00| seen| https://t.me/cissp/2237 2026-09-02 01:04:54+00:00| seen| https://t.me/cissp/2237...

CVE-2022-30514

creationtimestamp| type| source ---|---|--- 2022-06-02 18:38:56+00:00| seen| https://t.me/cibsecurity/43717...

CVE-2022-30797

creationtimestamp| type| source ---|---|--- 2022-06-02 18:31:48+00:00| seen| https://t.me/cibsecurity/43676...

CVE-2022-29780

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njsarrayprototypesort at src/njsarray.c...

Barco Control Room 跨站脚本漏洞

Barco Control Room is a visualization and collaboration solution from Barco Belgium. Used to build control rooms, a cross-site scripting vulnerability exists in the Barco Control Room Management Suite web application prior to version 3.14. The vulnerability stems from the URL parameter of the...

Security Bulletin: IBM Common Licensing is vulnerable by a remote code attack in Spring Framework (CVE-2021-22096,CVE-2021-22060,CVE-2022-22950,CVE-2022-22968)

Summary IBM Common Licensing is vulnerable to a remote code execution in Spring Framework CVE-2021-22096,CVE-2021-22060,CVE-2022-22950,CVE-2022-22968 as it does have Spring Framework versions 5.3.0 to 5.3.17, 5.2.0 to 5.2.19, and older versions. The fix includes Spring Framework version 5.3.19...

PT-2022-19825 · Onlyoffice · Onlyoffice Document Server +1

Name of the Vulnerable Software and Affected Versions: Onlyoffice Document Server versions 6.0.0 and below Onlyoffice Core versions 6.1.0.26 and below Description: A stack overflow issue was discovered in the DesktopEditor/common/File.cpp component. Recommendations: For Onlyoffice Document Server...