Oracle MySQL Cluster Buffer Overflow Vulnerability (CNVD-2022-07924)

Oracle MySQL Cluster is a write-scalable, real-time, ACID-compatible transactional database developed by Oracle Corporation USA. Oracle MySQL Cluster suffers from a buffer overflow vulnerability, which can be exploited by attackers to read the contents of memory or crash the application...

openSUSE 15 Security Update : polkit (openSUSE-SU-2022:0190-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0190-1 advisory. - polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector CVE-2021-4034 Note that Nessus has not tested for this...

Oracle Linux 7 : polkit (ELSA-2022-0274)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-0274 advisory. 0.112-26.0.1 - Increase timeout to avoid defunct processes Orabug: 26930744 0.112-26.1 - pkexec: argv overflow results in local privilege esc. - Resolves:...

Oracle MySQL Cluster Information Disclosure Vulnerability

Oracle MySQL Cluster is the United States Oracle Oracle company developed a write scalable, real-time, ACID-compatible transactional database. An information disclosure vulnerability exists in Oracle MySQL Cluster, which can be exploited by an attacker to read the contents of memory or crash an...

Oracle MySQL Cluster Information Disclosure Vulnerability (CNVD-2022-18210)

MySQL Cluster is a write-scalable, real-time, ACID-compliant transactional database designed to guarantee 99.999% availability. An information disclosure vulnerability exists in Oracle MySQL Cluster, which can be exploited by an attacker to cause a read beyond the end of an array...

Adobe Acrobat Reader Dc Buffer Overflow Vulnerability (CNVD-2022-11155)

Adobe Acrobat Reader Dc is a Pdf reading tool from Adobe. Adobe Acrobat Reader Dc has a buffer overflow vulnerability that can be exploited by an attacker to trick a victim into opening a carefully constructed PDF file, triggering an out-of-bounds read error and reading the contents of system...

GPAC Denial of Service Vulnerability (CNVD-2022-07230)

GPAC is an open source multimedia framework. v1.1.0 of GPAC contains a security vulnerability that can be exploited by attackers to perform denial of service DoS attacks...

Bingrep Denial of Service Vulnerability

Bingrep is an open source project that Greps binaries from a variety of operating systems and architectures and colors them. Bingrep has security vulnerabilities that can be exploited by attackers to cause a denial of service DoS...

GLSA-202107-49 : Chromium, Google Chrome: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-49 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in chromium, and google-chrome. Please review the CVE identifiers referenced below for details. Impact : Please review the...

Apache ShardingSphere Information Disclosure Vulnerability

Apache ShardingSphere is an open source distributed database middleware solution from the Apache Foundation.Apache ShardingSphere ElasticJob-UI is vulnerable to an information disclosure vulnerability that stems from the exposure of sensitive information to unauthorized participants, which could ...

Oracle Enterprise Session Border Controller Denial of Service Vulnerability

Oracle Communications is a product of Oracle Corporation USA. A denial-of-service vulnerability exists in Oracle Enterprise Session Border Controller, which could be exploited by an attacker to cause a partial denial of service in Oracle Enterprise Session Border The vulnerability can be exploite...

Saraban Cross-Site Scripting Vulnerability

Saraban is a document management system from Softvibe Thailand. It is used for transferring files and notifications to reduce unnecessary duplication.SARABAN has a cross-site scripting vulnerability in version 1.1, which stems from the lack of data validation filtering of user-supplied data and...

Oracle Communications Operations Monitor has an unspecified vulnerability (CNVD-2022-17349)

Oracle Communications is a product of Oracle Corporation USA. provides integrated communications and cloud solutions for service providers and enterprises to accelerate their digital transformation.A security vulnerability exists in Oracle Communications Operations Monitor, which could be exploit...

Oracle MySQL Cluster Buffer Overflow Vulnerability (CNVD-2022-18214)

MySQL Cluster is a highly functional and redundant version of Oracle's MySQL for distributed computing environments. A buffer overflow vulnerability exists in Oracle MySQL Cluster, which can be exploited by an attacker to execute code in the context of a service account...

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types a...

CVE-2022-23120

creationtimestamp| type| source ---|---|--- 2022-01-20 22:12:06+00:00| seen| https://t.me/cibsecurity/35952 2022-01-21 11:01:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5247 2022-02-03 16:00:44+00:00| exploited| https://t.me/truesecator/2588 2023-12-04...

CVE-2021-35587

creationtimestamp| type| source ---|---|--- 2022-01-19 14:32:10+00:00| seen| https://t.me/cibsecurity/35815 2022-03-10 13:25:43+00:00| published-proof-of-concept| https://t.me/ptswarm/113 2022-03-14 11:00:19+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5601 2022-03-15...

CISA Adds 13 Known Exploited Vulnerabilities to Catalog

CISA has added 13 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types and...

marked denial of service vulnerability

marked is a Markdown parser and compiler written in JavaScript. marked contains a security vulnerability that could be exploited by an attacker to cause a catastrophic backtracking of certain strings and lead to a denial of service DoS...

SQL Injection Vulnerability in Flash Flood Monitoring and Early Warning Platform of Siltronic Technology Limited (CNVD-2022-13864)

Siltronic Ltd. is an information service provider for disaster reduction and profitability in China. A SQL injection vulnerability exists in the Flash Flood Monitoring and Early Warning Platform of Sicron Technology Limited, which can be exploited by attackers to obtain sensitive information from...