4769 matches found
Service Update 1.9 for Microsoft Dynamics CRM (on-premises) 9.1
None None...
PT-2022-2814 · Microsoft · Windows Fax Compose Form +1
Name of the Vulnerable Software and Affected Versions: Windows Fax Compose Form affected versions not specified Description: The issue is related to insufficient input validation in the Windows Fax Compose Form component. This allows a remote attacker to execute arbitrary code on the system...
PT-2022-2668 · Microsoft · Windows Hyper-V +1
Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to errors in processing information in the Windows Hyper-V hardware virtualization system, which can allow a remote attacker to gain unauthorized access to...
PT-2022-2540 · Microsoft · Windows Cluster Shared Volume +1
Name of the Vulnerable Software and Affected Versions: Windows Clustered Shared Volume versions affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Clustered Shared Volume CSV file system, which is caused by synchronization...
PT-2022-14310 · Ccci · Ccci
Name of the Vulnerable Software and Affected Versions: ccci affected versions not specified Description: The issue is related to an incorrect bounds check, which could lead to a leak of kernel pointer. This might result in local information disclosure, requiring System execution privileges for...
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly...
Zyxel Releases Patches for Critical Bug Affecting Business Firewall and VPN Devices
Networking equipment maker Zyxel has pushed security updates for a critical vulnerability affecting some of its business firewall and VPN products that could enable an attacker to take control of the devices. "An authentication bypass vulnerability caused by the lack of a proper access control...
PT-2022-8721 · Darkhttpd · Darkhttpd
Name of the Vulnerable Software and Affected Versions: darkhttpd affected versions not specified Description: A flaw was found in darkhttpd, allowing remote attackers to cause denial-of-service by accessing a file with a large modification date. The highest threat from this vulnerability is to...
CISA Adds Seven Known Exploited Vulnerabilities to Catalog
CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly...
CVE-2022-24789 Deserialization of untrusted data in C1 CMS.
C1 CMS is an open-source, .NET based Content Management System CMS. Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery SSRF by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. The attacker may also...
CISA Adds 32 Known Exploited Vulnerabilities to Catalog
CISA has added 32 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added...
CVE-2021-41987
In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code execution. The attacker must know the scepservername value. This affects RouterOS 6.46.8, 6.47.9, and 6.47.10...
CVE-2022-24729 Regular expression Denial of Service in dialog plugin
CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulnerability in the dialog plugin. The vulnerability allows abuse of a dialog input validator regular expression, which can cause a significant performance drop resulting in a brows...
CISA Adds 15 Known Exploited Vulnerability to Catalog
CISA has added 15 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types and...
PT-2022-20928 · Liblouis +5 · Liblouis +5
Name of the Vulnerable Software and Affected Versions: Liblouis version 3.21.0 Description: The issue is related to an out-of-bounds write in the compileRule function within the compileTranslationTable.c file. This has been demonstrated using lou trace. Recommendations: For Liblouis version 3.21....
RHEL 8 : kernel-rt (RHSA-2022:0822)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0822 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Securi...
PT-2022-1899 · Dell · Dell Bios
Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is caused by an improper input validation vulnerability in Dell BIOS, which may allow a local authenticated malicious user to gain arbitrary code execution during SMM by using a...
UBUNTU-CVE-2022-24917
An authenticated user can create a link with reflected Javascript code inside it for services’ page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict. Malicious code has access to all...
Description of the security update for Microsoft Exchange Server 2013: March 8, 2022 (KB5010324)
Description of the security update for Microsoft Exchange Server 2013: March 8, 2022 KB5010324 This security update rollup resolves vulnerabilities in Microsoft Exchange Server. To learn more about these vulnerabilities, see the following Common Vulnerabilities and Exposures CVE:CVE-2022-23277 |...