Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Jan 2022 - Includes Oracle® January 2022 CPU affects IBM Tivoli Composite Application Manager for Transactions-Robotic Response Time

Summary The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin. Vulnerability Details...

CVE-2022-40151

creationtimestamp| type| source ---|---|--- 2022-09-16 14:38:40+00:00| seen| https://t.me/cibsecurity/49896 2024-01-28 06:28:56+00:00| seen| https://t.me/arpsyndicate/3233...

Security Bulletin: Information regarding security vulnerability in IBM SDK Java™ Technology Edition that is shipped with IBM WebSphere Application Server and addressed by Oracle CPU January 2014

Summary Multiple security vulnerabilities exist in the IBM SDK Java Technology Edition that is shipped with IBM WebSphere Application Server and included in the products that are listed in this document. Vulnerability Details The affected products are shipped with a version of IBM WebSphere...

CVE-2022-35413

creationtimestamp| type| source ---|---|--- 2022-09-14 02:25:57+00:00| seen| https://t.me/cibsecurity/49750 2024-01-15 10:01:13+00:00| seen| https://t.me/arpsyndicate/2777 2025-01-01 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-01-01 2025-01-03...

CVE-2022-20128

creationtimestamp| type| source ---|---|--- 2022-09-11 20:20:47+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6778 2022-09-13 14:05:05+00:00| published-proof-of-concept| https://t.me/CNArsenal/259 2023-03-28 08:55:29+00:00| published-proof-of-concept|...

Security Bulletin: Multiple vulnerabilities have been identified in IBM Java 8 shipped with IBM® Intelligent Operations Center (CVE-2022-21365, CVE-2022-21360, CVE-2022-21349, CVE-2022-21341, CVE-2022-21340, CVE-2022-21305, CVE-20)

Summary Multiple vulnerabilities have been identified in Oracle January 2022 CPU for Java 8 which is shipped with IBM® Intelligent Operations Center. Information about these vulnerabilities affecting IBM® Intelligent Operations Center have been published and addressed the applicable CVEs...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Tivoli Storage Productivity Center January 2015 CPU

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition and IBM® Runtime Environment Java™ Technology Edition that is shipped and used by Tivoli Storage Productivity Center. These issues were disclosed as part of the IBM Java SDK updates in January 2015. Vulnerability...

CVE-2022-25168

creationtimestamp| type| source ---|---|--- 2022-08-04 18:19:39+00:00| seen| https://t.me/cibsecurity/47559 2024-01-27 23:54:45+00:00| seen| https://t.me/arpsyndicate/3121...

The January 6 Secret Service Text Scandal Turns Criminal

Plus: The FCC cracks down on car warranty robocalls, Thai activists get targeted by NSO's Pegasus, and the Russia-Ukraine cyberwar continues...

The January 6 Insurrection Hearings Are Just Heating Up

The US House committee has already uncovered a more organized and sinister plot than many imagined. But history suggests the worst may be yet to come...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect Rational Business Developer

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 and 8 and IBM® Runtime Environment Java™ Version 7 and 8 used by Rational Business Developer. Rational Business Developer has provided fixes for the applicable CVEs. These issues were disclosed as part of t...

Security Updates for Microsoft Office Products C2R (January 2021)

The Microsoft office Product is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft Office Remote Code Execution Vulnerability CVE-2021-1711 - Microsoft Excel Remote Code Execution Vulnerability CVE-2021-1714 - Microsoft Word Remote Code Execution...

Security Updates for Microsoft Office Products C2R (January 2022)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21840, CVE-2022-21841...

Security Updates for Microsoft Excel Products C2R (January 2020)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the...

Security Updates for Microsoft Word Products C2R (January 2022)

The Microsoft Word Products are missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21842 %NASLMINLEVEL 70300 C...

CVE-2022-29014

creationtimestamp| type| source ---|---|--- 2022-06-09 07:33:02+00:00| seen| https://t.me/cibsecurity/44074 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-01-31 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-31...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK (January 2022) affects IBM InfoSphere Information Server

Summary There are multiple vulnerabilities in the IBM® SDK Java™ Technology Edition, Version 8 that is used by IBM InfoSphere Information Server. These issues were disclosed as part of the IBM Java SDK updates in January 2022. Vulnerability Details CVEID:CVE-2021-35603 DESCRIPTION: An unspecified...

SAP NetWeaver AS ABAP Multiple Vulnerabilities (January 2022)

Multiple vulnerabilities may be present in SAP NetWeaver Application Server ABAP, including the following: - A URL redirection vulnerability exists in SAP NetWeaver Application Server ABAP, due to insufficient URL validation. An unauthenticated, remote attacker can exploit this to redirect users ...

CVE-2022-29007

creationtimestamp| type| source ---|---|--- 2022-05-11 18:35:50+00:00| seen| https://t.me/cibsecurity/42372 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-02-10 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-10...

CVE-2022-0826

creationtimestamp| type| source ---|---|--- 2022-05-09 20:36:43+00:00| seen| https://t.me/cibsecurity/42193 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-05-11 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities -...