CVE-2022-22483

IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some scenarios due to unauthorized access caused by improper privilege management when CREATE OR REPLACE command is used. IBM X-Force ID: 225979...

PT-2022-21591 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7 macOS versions prior to 12.6 macOS versions prior to 13 Description: The issue was addressed with improved memory handling. A remote user may be able to cause kernel code execution. Recommendations: For macOS...

Apple macOS Big Sur 安全漏洞

Apple macOS Big Sur is the 17th major release of Apple's macOS, the operating system used by Apple Inc. for MACs in the United States. A security vulnerability exists in Apple macOS Big Sur versions prior to 11.7 that stems from an application that may leak kernel memory...

Apple macOS Big Sur 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Big Sur versions prior to 11.7, which stems from an application that may be able to gain elevated privileges...

Apple macOS Big Sur 安全漏洞

Apple macOS Big Sur is the 17th major release of macOS, the operating system used by Apple Inc. for MACs in the United States. A security vulnerability exists in Apple macOS Big Sur versions prior to 11.7, which stems from the possibility that applications may be able to bypass privacy preference...

Apple macOS Big Sur 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Big Sur versions prior to 11.7, which stems from the fact that users may be able to view sensitive user information...

Apple macOS Big Sur 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Big Sur versions prior to 11.7, which stems from an application that may be able to bypass privacy preferences...

CVE-2022-36866

Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to identify the device...

CVE-2022-36865

Improper access control in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to access device information...

PT-2022-25345 · Openkm · Openkm

Name of the Vulnerable Software and Affected Versions: OpenKM version 6.3.11 Description: The issue allows stored XSS related to the javascript: substring in an A element. This could potentially lead to malicious script execution when a user interacts with the affected element. Recommendations: F...

PT-2022-25338 · Canto · Canto Cumulus

Name of the Vulnerable Software and Affected Versions: Canto Cumulus versions through 11.1.3 Description: A Server-Side Request Forgery issue allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified other impact via the server parameter to the...

Vulnerabilities fixed in Aruba ClearPass Policy Manager

Aruba has fixed vulnerabilities in ClearPass Policy Manager CPPM. The vulnerabilities potentially enable a malicious person to able to perform attacks that result in the following categories of damage: Cross-Site Request Forgery XSRF. Denial-of-Service DoS. Remote code execution Administrator/Roo...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices Android S12 prior to version 13.0.6.15 and Android R11 prior to version 13.0.6.14, which ste...

CVE-2022-3118

creationtimestamp| type| source ---|---|--- 2022-09-04 12:41:02+00:00| seen| https://t.me/cibsecurity/49276...

CVE-2021-25657

A privilege escalation vulnerability was discovered in Avaya IP Office Admin Lite and USB Creator that may potentially allow a local user to escalate privileges. This issue affects Admin Lite and USB Creator 11.1 Feature Pack 2 Service Pack 1 and earlier versions...

CVE-2020-4301

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 176609...

PT-2022-6471 · Netapp · Active Iq Unified Manager

Name of the Vulnerable Software and Affected Versions: Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 Description: The issue is related to a Stored Cross-Site Scripting XSS attack, which can be performed by administrative users. This is due to...

CVE-2022-37022

Apache Geode versions up to 1.12.2 and 1.13.2 are vulnerable to a deserialization of untrusted data flaw when using JMX over RMI on Java 11. Any user wishing to protect against deserialization attacks involving JMX or RMI should upgrade to Apache Geode 1.15. Use of 1.15 on Java 11 will...

CVE-2022-37021

Apache Geode versions up to 1.12.5, 1.13.4 and 1.14.0 are vulnerable to a deserialization of untrusted data flaw when using JMX over RMI on Java 8. Any user still on Java 8 who wishes to protect against deserialization attacks involving JMX or RMI should upgrade to Apache Geode 1.15 and Java 11. ...

Apache Geode 代码问题漏洞

Apache Geode is the Apache Foundation's suite of management platforms for providing real-time and consistent access to data for data-intensive applications in distributed cloud architectures. A security vulnerability exists in Apache Geode versions prior to 1.15.0 that stems from the vulnerabilit...