4770 matches found
Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Vulnerability Details CVEID:CVE-2021-38185 DESCRIPTION: GNU cpio could allow a remote attacker to execute arbitrary code on the system, caused by an integer...
CISA Has Added One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This type of vulnerability is a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: To view the newly added...
PT-2022-36708 · Libraw · Libraw
Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to a heap-buffer-overflow error, specifically a WRITE 2 crash type. The crash occurs in the LibRaw::kodak rgb load raw function, which is called by LibRaw::kodak thumb...
October 25, 2022-KB5018855 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Microsoft server operating system, version 22H2
None None...
PT-2022-21485 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An out-of-bounds read issue was addressed through improved input validation. There is no information available about the estimated number of potentially...
PT-2022-24205 · Solarwinds · Sql Sentry
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: Sensitive information could be displayed when a detailed technical error message is posted, potentially disclosing environmental details. Recommendations: At the moment, there is no...
October 17, 2022—KB5020436 (OS Build 20348.1131) Out-of-band
None None...
CVE-2022-40187
Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework TCF service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless acce...
CVE-2022-40187
Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework TCF service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless acce...
Design/Logic Flaw
Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework TCF service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless acce...
CVE-2022-39303 Ree6 vulnerable to SQL Injection
Ree6 is a moderation bot. This vulnerability allows manipulation of SQL queries. This issue has been patched in version 1.7.0 by using Javas PreparedStatements, which allow object setting without the risk of SQL injection. There are currently no known workarounds...
@24hr/rawb-search (>=0.10.1, <=0.29.10), @aerogear/apollo-voyager-keycloak (>=0.1.0, <=0.2.7-rc3) +79 more potentially affected by unknown CVE via apollo-server (>=2.0.0, <=2.25.3)
apollo-server NPM version =2.0.0, =0.10.1, =0.1.0, =0.1.0, =0.3.0-SNAPSHOT1, =0.5.0-rc1, =0.3.0-SNAPSHOT1, =2018.8.29-0, =2018.8.28-0, =0.5.7, =1.0.0, =0.0.1-alpha.44, =0.4.0, =0.0.0-d99f4ac.0, =1.27.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2P3C-P3QW-69R4...
PT-2022-17442 · Qualcomm · Qualcomm Snapdragon
Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption due to an untrusted pointer dereference in the kernel of Qualcomm Snapdragon. This affects various Snapdragon products, including...
PT-2022-22268 · Mediabridge · Mediabridge Medialink
Name of the Vulnerable Software and Affected Versions: Mediabridge Medialink affected versions not specified Description: A critical issue was found in Mediabridge Medialink, affecting the file /index.asp, which leads to improper authentication. The attack can be initiated remotely...
ManageEngine PAM360 < 5.5 Build 5510 RCE
The remote host is running a version of ManageEngine PAM360 prior to 5.5 Build 5510. It is, therefore, affected by a remote code execution vulnerability. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands on the remote host. Note that Ness...
October 11, 2022—KB5018478 (Security-only update)
None None...
October 11, 2022—KB5018476 (Security-only update)
None None...
August 9, 2022—KB5016672 (Monthly Rollup)
None None...