4768 matches found
January 11, 2022—KB5009619 (Security-only update)
None None...
Description of the security update for Microsoft Exchange Server 2019, 2016, and 2013: January 11, 2022 (KB5008631)
None None...
January 11, 2022—KB5009546 (OS Build 14393.4886) - EXPIRED
None None...
PT-2022-14265 · Mediatek · Libmtkomxgsmdec
Name of the Vulnerable Software and Affected Versions: libMtkOmxGsmDec affected versions not specified Description: The issue is related to an incorrect bounds check in libMtkOmxGsmDec, which could lead to local information disclosure without requiring additional execution privileges. User...
PT-2021-23376 · Unknown · Livehelperchat
Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly neutralize use...
PT-2021-22508 · Qemu +6 · Qemu +6
Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: A DMA reentrancy issue was found in the NVM Express Controller NVME emulation. This issue can lead to a use-after-free problem when a malicious guest triggers the reset function nvme ctrl rese...
Apache Archiva < 2.2.6 Multiple Log4j Vulnerabilities (Log4Shell) - Version Check
Apache Archiva is prone to multiple vulnerabilities in the Apache Log4j library. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Apache Tika 2.x < 2.2.0 Log4j RCE Vulnerability (Log4Shell)
Apache Tika is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CISA Compliance for 2022
The last several years have seen an ever-increasing number of cyber-attacks, and while the frequency of such attacks has increased, so too has the resulting damage. One needs only to look at CISA's list of significant cyber incidents to appreciate the magnitude of the problem. In May of 2021, for...
Apache JSPWiki 2.11.0 Log4j RCE Vulnerability (Log4Shell) - Active Check
Apache JSPWiki is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Amazon Linux 2 : java-1.8.0-amazon-corretto (ALAS-2021-001) (deprecated)
This plugin has been deprecated following detection of an issue with overlapping filenames. Deprecated by al2ALASCORRETTO8-2021-001.nasl plugin ID 160410 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux 2 Security Advisory...
Apache Log4j 2.0.x Multiple Vulnerabilities (Windows, Log4Shell) - Version Check
Apache Log4j is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:log4j"; ifdescription...
PT-2021-6415 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to disclose protected information. This can be exploited to obtain sensitive information and affect the...
Security Bulletin: IBM Security SOAR is using a component with known vulnerabilities - Elasticsearch ( CVE-2021-22144, CVE-2021-22145, CVE-2021-22147)
Summary IBM Security SOAR is using a component with known vulnerabilities - Elasticsearch CVE-2021-22144, CVE-2021-22145, CVE-2021-22147 Vulnerability Details CVEID: CVE-2021-22144 DESCRIPTION: Elasticsearch is vulnerable to a denial of service, caused by an uncontrolled recursion vulnerability i...
CVE-2020-18985: URL Redirection to Untrusted Site
An issue in /domain/service/.ewell-known/caldav of Zimbra Collaboration 8.8.12 allows attackers to redirect users to any arbitrary website of their choosing...
PT-2021-10263
Name of the Vulnerable Software and Affected Versions: Zimbra Collaboration version 8.8.12 Description: The issue allows attackers to redirect users to any arbitrary website of their choosing through the /domain/service/.well-known/caldav endpoint. Recommendations: For Zimbra Collaboration versio...
Design/Logic Flaw
Seafile is an open source cloud storage system. A sync token is used in Seafile file syncing protocol to authorize access to library data. To improve performance, the token is cached in memory in seaf-server. Upon receiving a token from sync client or SeaDrive client, the server checks whether th...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
log4j-finder A Python3 script to scan the filesystem to find...