BELL-CVE-2020-27792 CVE-2020-27792 does not affect BellSoft software

Bulletin has no description...

CVE-2022-35451

OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b03b5...

BELL-CVE-2021-46829 CVE-2021-46829 does not affect BellSoft software

Bulletin has no description...

CVE-2022-24082

If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Internet and port filtering is not properly configured, then it may be possible to upload serialized payloads to attack the underlying system. This does not affect systems running o...

PT-2022-16457 · Pegasystems · Pega Platform

Name of the Vulnerable Software and Affected Versions: Pega Platform affected versions not specified Description: The issue arises when an on-premise installation of the Pega Platform has the JMX interface port exposed to the Internet without proper port filtering configuration. This could allow...

BELL-CVE-2022-23825 CVE-2022-23825 does not affect BellSoft software

Bulletin has no description...

CVE-2022-22213

A vulnerability in Handling of Undefined Values in the routing protocol daemon RPD process of Juniper Networks Junos OS and Junos OS Evolved may allow an unauthenticated network-based attacker to crash the RPD process by sending a specific BGP update while the system is under heavy load, leading ...

Unauthorized view fragment access

Jenkins uses the Stapler web framework to render its UI views. These views are frequently composed of several view fragments, enabling plugins to extend existing views with more content. Before SECURITY-534 was fixed in Jenkins 2.186 and LTS 2.176.2, attackers could in some cases directly access ...

CVE-2022-32151

The httplib and urllib Python libraries that Splunk shipped with Splunk Enterprise did not validate certificates using the certificate authority CA certificate stores by default in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203. Python 3 client libraries...

BELL-CVE-2022-2000 CVE-2022-2000 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2022-32250 CVE-2022-32250 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2022-1789 CVE-2022-1789 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2022-1882 CVE-2022-1882 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2022-29599 CVE-2022-29599 does not affect BellSoft software

Bulletin has no description...

CVE-2022-21500

Vulnerability in Oracle E-Business Suite component: Manage Proxies. The supported version that is affected is 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle E-Business Suite. Successful attacks of this vulnerability can...

BELL-CVE-2022-1733 CVE-2022-1733 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2022-1679 CVE-2022-1679 does not affect BellSoft software

Bulletin has no description...

CVE-2022-27183

The Monitoring Console app configured in Distributed mode allows for a Reflected XSS in a query parameter in Splunk Enterprise versions before 8.1.4. The Monitoring Console app is a bundled app included in Splunk Enterprise, not for download on SplunkBase, and not installed on Splunk Cloud Platfo...

BELL-CVE-2022-1195 CVE-2022-1195 does not affect BellSoft software

Bulletin has no description...

CVE-2022-29583

servicewindows.go in the kardianos service package for Go omits quoting that is sometimes needed for execution of a Windows service executable from the intended directory. NOTE: this finding could not be reproduced by its original reporter or by others...