2569 matches found
Changing the tide: Reflections on threat data from 2024
"Enough Ripples, And You Change The Tide. For The Future Is Never Truly Set." X-Men: Days of Future Past In January, I dedicated some time to examine threat data from 2024, comparing it with the previous years to identify anomalies, spikes, and changes. As anticipated, the number of Common...
CVE-2022-34159
Huawei printers have an input verification vulnerability. Successful exploitation of this vulnerability may cause device service exceptions. Vulnerability ID: HWPSIRT-2022-80078 This vulnerability has been assigned a Common Vulnerabilities and Exposures CVE ID: CVE-2022-34159...
CVE-2022-32204
There is an improper input verification vulnerability in Huawei printer product. Successful exploitation of this vulnerability may cause service abnormal. Vulnerability ID: HWPSIRT-2022-87185 This vulnerability has been assigned a Common Vulnerabilities and Exposures CVE ID: CVE-2022-32204...
CVE-2020-9080
There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. Vulnerability ID: HWPSIRT-2020-05272 This vulnerabilit...
CVE-2020-9236
There is an improper interface design vulnerability in Huawei product. A module interface of the impated product does not deal with some operations properly. Attackers can exploit this vulnerability to perform malicious operatation to compromise module service. Vulnerability ID: HWPSIRT-2020-0501...
cvex
cvex A curated repository dedicated t...
Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-15040024119 fixes several issues. The following security issues were fixed: CVE-2024-36971: Fixed dstnegativeadvice race bsc1226324. CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. CVE-2022-48956: ipv...
The Vulnerability Vortex: Escaping the Whirlpool of Ineffective Security
Drowning in data: The modern security dilemma In today's interconnected digital landscape, organizations find themselves caught in a relentless torrent of security alerts and vulnerability notifications. As cyber threats evolve at breakneck speed, security teams struggle to keep their heads above...
New Research: The State of Web Exposure 2025
Are your websites leaking sensitive data? New research reveals that 45% of third-party apps access user info without proper authorization, and 53% of risk exposures in Retail are due to the excessive use of tracking tools. Learn how to uncover and mitigate these hidden threats and risks—download...
BELL-CVE-2025-21661
Bulletin has no description...
BELL-CVE-2024-57934
Bulletin has no description...
CVE-2025-21544
...
CVE-2025-21526
...
CVE-2025-21514
...
CVE-2025-21515
CVE-2025-21515 concerns Oracle JD Edwards EnterpriseOne Tools, specifically the Web Runtime SEC component, affected in versions before 9.2.9.0. The vulnerability allows a low-privileged attacker with network access over HTTP to takeover JD Edwards EnterpriseOne Tools, with CVSS v3.1 base score 8....
CVE-2025-21502
...
CVE-2024-21245
CVE-2024-21245 concerns Oracle JD Edwards EnterpriseOne Tools (component: Business Logic Infra SEC). Affected products are versions prior to 9.2.9.0. The vulnerability can be exploited by a low-privilege, network-accessing attacker over HTTP and, with user interaction, may lead to unauthorized up...
UBUNTU-CVE-2024-57920
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
