CVE-2022-37968

Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters. This vulnerability could allow an unauthenticated user to elevate their privileges and potentially gain administrative control over the Kubernetes cluster. Additionally, becaus...

Security feature bypass

Windows Active Directory Certificate Services Security Feature Bypass...

CVE-2022-40178

A vulnerability has been identified in Desigo PXM30-1 All versions V02.20.126.11-41, Desigo PXM30.E All versions V02.20.126.11-41, Desigo PXM40-1 All versions V02.20.126.11-41, Desigo PXM40.E All versions V02.20.126.11-41, Desigo PXM50-1 All versions V02.20.126.11-41, Desigo PXM50.E All versions...

CVE-2022-40178

A vulnerability has been identified in Desigo PXM30-1 All versions V02.20.126.11-41, Desigo PXM30.E All versions V02.20.126.11-41, Desigo PXM40-1 All versions V02.20.126.11-41, Desigo PXM40.E All versions V02.20.126.11-41, Desigo PXM50-1 All versions V02.20.126.11-41, Desigo PXM50.E All versions...

Description of the security update for SharePoint Server 2019: October 11, 2022 (KB5002278)

None None...

Windows Active Directory Certificate Services Security Feature Bypass

...

Description of the security update for SharePoint Enterprise Server 2016: October 11, 2022 (KB5002287)

None None...

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

...

CVE-2022-37978

CVE-2022-37978 is a Windows Active Directory Certificate Services security feature bypass (Circumvention of security measure) with CVSS v3.1 base score 7.5. Affected component: Active Directory Certificate Services in Windows. Root cause details are not fully disclosed in the provided connected d...

CVE-2022-38032 Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

...

CVE-2022-38032

Technical details for CVE-2022-38032 are not publicly provided in the supplied documents; monitor for updates from Microsoft MSRC and related references.

APSB22-48: Security updates available for Adobe Commerce

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves a critical and medium vulnerability. Successful exploitation could lead to arbitrary code execution and security feature bypass...

CVE-2022-37978 Windows Active Directory Certificate Services Security Feature Bypass

...

Microsoft Windows Active Directory Certificate Services 安全漏洞

Microsoft Windows Active Directory is a centralized directory management service from Microsoft Corporation USA that is responsible for architecting large network environments. Microsoft Windows Active Directory is vulnerable to a certificate service security feature bypass. No details of the...

PT-2022-26324 · Unknown · Merchandise Online Store

Name of the Vulnerable Software and Affected Versions: Merchandise Online Store version 1.0 Description: A Stored XSS issue allows the injection of arbitrary JavaScript in the edit account form. Recommendations: For version 1.0, update the edit account form to properly sanitize user input and...

APSB22-44: Security updates available for ColdFusion

Adobe has released security updates for ColdFusion versions 2021 and 2018. These updates resolve Critical, Important and Moderate vulnerabilities that could lead to arbitrary code execution, arbitrary file system write, security feature bypass and privilege escalation...

PT-2022-6405 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.4-p1 and earlier Adobe Commerce versions 2.4.5 and earlier Description: The issue is related to an Improper Access Control that could result in a Security feature bypass. An attacker could leverage this vulnerabili...

PT-2022-7258 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.8 Description: The issue is related to a heap-buffer-overflow vulnerability via the put unweighted pred 16 fallback function in fallback-motion.cc. This allows attackers to cause a Denial of Service DoS via a crafted vide...

CVE-2022-35844

CVE-2022-35844 is a command-injection vulnerability in FortiTester’s management interface. It affects FortiTester versions 2.3.0–3.9.1, 4.0.0–4.2.0, and 7.0.0–7.1.0, caused by improper neutralization of special elements in OS commands. An authenticated attacker can execute unauthorized commands v...

Ocean Extra < 2.0.5 - Admin+ PHP Objection Injection

The plugin unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import intentionally or not a malicious Customizer Styling file and a suitable gadget chain is present on the blog. To simulate a gadget chain, put the following co...