Reolink Rlc-410W Denial of Service Vulnerability (CNVD-2022-10733)

Reolink Rlc-410W is a Wifi security camera from Reolink China.Reolink RLC-410W has a security vulnerability that can be exploited by attackers to cause a denial of service...

Reolink Rlc-410W Denial of Service Vulnerability (CNVD-2022-12643)

Reolink Rlc-410W is a Wifi security camera from Reolink China.Reolink RLC-410W has a security vulnerability that can be exploited by attackers to cause a denial of service...

IBM Financial Transaction Manager Authorization Issue Vulnerability (CNVD-2022-08965)

IBM Financial Transaction Manager is a financial transaction manager from IBM Corporation in the United States. The product is primarily used to monitor, track and report financial payments and transactions. IBM Financial Transaction Manager 3.2.4 contains an authorization issue vulnerability tha...

Siemens Spectrum Power 4 Cross-Site Scripting Vulnerability

Spectrum Power provides essential components for SCADA, communications and data modeling for control and monitoring systems. Siemens Spectrum Power 4 suffers from a cross-site scripting vulnerability that can be exploited by an attacker to conduct an attack if an unsuspecting user is tricked into...

IBM Financial Transaction Manager Cross-Site Request Forgery Vulnerability (CNVD-2022-08964)

IBM Financial Transaction Manager is a financial transaction manager from IBM Corporation in the United States. The product is primarily used to monitor, track and report on financial payments and transactions.IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site request forgery,...

KB5010351: Windows 10 version 1809 / Windows Server 2019 Security Update (February 2022)

The remote Windows host is missing security update 5010351. It is, therefore, affected by multiple vulnerabilities %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid157432; scriptversion"1.17";...

IBM Security Verify Access Unauthorized Access Vulnerability

IBM Security Verify Access ISAM is a service from IBM USA that improves user access security. IBM Security Verify Access versions 10.0.0.0, 10.0.1.0 and 10.0.2.0 have a security vulnerability that could be exploited by an attacker to authenticate as any user on the system authenticate as any user...

CVE-2021-25114

creationtimestamp| type| source ---|---|--- 2022-02-07 18:34:50+00:00| seen| https://t.me/cibsecurity/36939 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-25114.yaml 2025-01-26 00:00:00+00:00| seen| The Shadowserver...

CISA Orders Federal Agencies to Patch Actively Exploited Windows Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA is urging federal agencies to secure their systems against an actively exploited security vulnerability in Windows that could be abused to gain elevated permissions on affected hosts. To that end, the agency has added CVE-2022-21882...

CVE-2022-24260

creationtimestamp| type| source ---|---|--- 2022-02-04 20:31:01+00:00| seen| https://t.me/cibsecurity/36865 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-02-21 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities -...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types and...

CVE-2021-37852

creationtimestamp| type| source ---|---|--- 2022-02-02 13:32:10+00:00| seen| https://t.me/informationsecuritychannel/46518 2022-02-03 16:00:44+00:00| exploited| https://t.me/truesecator/2588...

Twelve-Year-Old Linux Vulnerability Discovered and Patched

Its a privilege escalation vulnerability: Linux users on Tuesday got a major dose of bad news -- a 12-year-old vulnerability in a system tool called Polkit gives attackers unfettered root privileges on machines running most major distributions of the open source operating system. Previously calle...

File Upload Vulnerability in Flash Flood Monitoring and Early Warning System of Siltronic Ltd (CNVD-2022-16624)

Siltronic Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. A file upload vulnerability exists in the Flash Flood Monitoring and Early Warning System of Sicron Technology Co. Ltd, which can be exploited by attackers to gain control of the...

Code injection

HTML code injection vulnerability in Android Application, Bosch Video Security, version 3.2.3. or earlier, when successfully exploited allows an attacker to inject random HTML code into a component loaded by WebView, thus allowing the Application to display web resources controlled by the attacke...

Cesanta MJS Denial of Service Vulnerability (CNVD-2022-09556)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. cesanta MJS denial of service vulnerability can be exploited by attackers to cause a denial of service...

Cesanta MJS Buffer Overflow Vulnerability (CNVD-2022-09554)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS buffer overflow vulnerability can be exploited by attackers to cause a buffer overflow...

Cesanta MJS Buffer Overflow Vulnerability (CNVD-2022-09548)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS buffer overflow vulnerability can be exploited by attackers to cause a buffer overflow...

CISA Adds Eight Known Exploited Vulnerabilities to Catalog

CISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types...

Cesanta MJS Buffer Overflow Vulnerability (CNVD-2022-09545)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS buffer overflow vulnerability can be exploited by attackers to cause a buffer overflow...