EUVD-2022-50121

Malicious code in bioql PyPI...

EUVD-2022-50127

Malicious code in bioql PyPI...

EUVD-2022-51078

Malicious code in bioql PyPI...

EUVD-2022-3694

Malicious code in bioql PyPI...

EUVD-2022-50124

Malicious code in bioql PyPI...

EUVD-2022-50125

Malicious code in bioql PyPI...

EUVD-2022-50123

Malicious code in bioql PyPI...

📄 Piciorgros TMO-100 Information Disclosure

Piciorgros TMO-100 suffers from an issue where it provides unauthorized log data access. It affects versions prior to 4.20. PDF advisory: https://rt-solutions.de/piciorgros/PiciorgrosTMO-100IP-Loggeren.pdf Classification -------------- - CWE-200: Exposure of Sensitive Information to an Unauthoriz...

CVE-2022-48382

In log service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

CVE-2022-47356

In log service, there is a missing permission check. This could lead to local denial of service in log service...

CVE-2022-47354

In log service, there is a missing permission check. This could lead to local denial of service in log service...

CVE-2022-47358

In log service, there is a missing permission check. This could lead to local denial of service in log service...

CVE-2022-47359

In log service, there is a missing permission check. This could lead to local denial of service in log service...

CVE-2022-47360

In log service, there is a missing permission check. This could lead to local denial of service in log service...

CVE-2022-47357

In log service, there is a missing permission check. This could lead to local denial of service in log service...

CVE-2022-47355

In log service, there is a missing permission check. This could lead to local denial of service in log service...

Trend Micro Apex One LogServer Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

BIT-ENVOY-2023-27488 Envoy gRPC client produces invalid protobuf when an HTTP header with non-UTF8 value is received.

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, escalation of privileges is possible when failuremodeallow: true is configured for extauthz filter. For affected components that are used for loggin...

EventLogCrasher Flaw Not Serviced by Microsoft

Summary: A recently identified vulnerability, known as EventLogCrasher, poses a significant risk to Windows platforms by allowing authenticated attackers to disrupt the Windows Event Log service. This vulnerability affects all iterations of Windows and has yet to be addressed by Microsoft, lackin...

CVE-2022-48382

In log service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...