13586 matches found
CVE-2022-24816
creationtimestamp| type| source ---|---|--- 2022-04-14 00:18:15+00:00| seen| https://t.me/cibsecurity/40743 2024-06-26 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-11-08 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-08 2024-11-13...
CVE-2022-28052
Directory Traversal vulnerability in file cn/roothub/store/FileSystemStorageService in function store in Roothub 2.6.0 allows remote attackers with low privlege to arbitrarily upload files via /common/upload API, which could lead to remote arbitrary code execution...
CVE-2022-28052
Directory Traversal vulnerability in file cn/roothub/store/FileSystemStorageService in function store in Roothub 2.6.0 allows remote attackers with low privlege to arbitrarily upload files via /common/upload API, which could lead to remote arbitrary code execution...
Weekly Threat Digest: 4 – 10 April 2022
For a detailed threat digest, download the pdf file here Published Vulnerabilities Interesting Vulnerabilities Active Threat Groups Targeted Countries Targeted Industries ATT&CK TTPs 438 3 3 53 16 54 The second week of April 2022 witnessed the discovery of 438 vulnerabilities out of which 3 gaine...
CVE-2022-24411
creationtimestamp| type| source ---|---|--- 2022-04-12 22:17:15+00:00| seen| https://t.me/cibsecurity/40673...
CVE-2022-27480
creationtimestamp| type| source ---|---|--- 2022-04-12 12:22:59+00:00| seen| https://t.me/cibsecurity/40585...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Description of the security update for Skype for Business Lync Server 2013: April 12, 2022 (KB5012681)
Description of the security update for Skype for Business Lync Server 2013: April 12, 2022 KB5012681 Summary This security update resolves an information disclosure vulnerability in Microsoft Lync Server. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposure...
CVE-2022-26098
creationtimestamp| type| source ---|---|--- 2022-04-12 00:22:27+00:00| seen| https://t.me/cibsecurity/40529...
Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-24521)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
PT-2022-2922 · Microsoft · Windows Common Log File System Driver +1
Name of the Vulnerable Software and Affected Versions: Windows Common Log File System CLFS Driver affected versions not specified Description: The issue is related to insecure privilege management in the Windows Common Log File System CLFS driver of the Microsoft Windows operating system...
Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-24481)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
PT-2022-2241
Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description This issue is an elevation-of-privilege vulnerability affecting the Windows Common Log File System Driver. Successful exploitation could allow attackers to affec...
CVE-2022-22255
The application framework has a common DoS vulnerability.Successful exploitation of this vulnerability may affect the availability...
CVE-2022-1296
creationtimestamp| type| source ---|---|--- 2022-04-11 16:16:03+00:00| seen| https://t.me/cibsecurity/40459...
thunderbird security update
An update is available for thunderbird. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. This updat...
Arbitrary File Write
hadoop-common is vulnerable to arbitrary file write.The vulnerable exists in the function unTar in FileUtil.java which allows an attacker to extract arbitrary files using symlink name...
CVE-2022-22954
creationtimestamp| type| source ---|---|--- 2022-04-07 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=775 2022-04-07 07:51:03+00:00| seen| https://t.me/thehackernews/2058 2022-04-07 15:10:55+00:00| seen| https://t.me/ptswarm/119 2022-04-11 10:48:25+00:00|...
The vulnerability of the CGI microprogramming system handlers of ZyXEL NBG6816 (Armor Z1) and NBG6817 (Armor Z2) allows a hacker to execute arbitrary commands.
The vulnerability of CGI microprogramming system processors in Wi-Fi routers from ZyXEL NBG6816 Armor Z1 and NBG6817 Armor Z2 lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow attackers to execute...
CVE-2022-20762
A vulnerability in the Common Execution Environment CEE ConfD CLI of Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure SMI software could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to insufficient access control in...