CVE-2022-29586

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode...

PT-2022-18009

Name of the Vulnerable Software and Affected Versions macOS versions prior to 12.4 Description This issue was addressed with improved checks. A plug-in may be able to inherit the application's permissions and access user data. Recommendations For versions prior to 12.4, update to macOS Monterey...

PT-2022-18010

Name of the Vulnerable Software and Affected Versions macOS versions prior to 12.4 Description This issue was addressed with improved checks. A plug-in may be able to inherit the application's permissions and access user data. Recommendations For versions prior to 12.4, update to macOS Monterey...

Security Bulletin: IBM Security Verify Password Synchronization Plug-in for Windows AD affected by multiple vulnerabilities (CVE-2021-20488, CVE-2021-20494, CVE-2021-20572, CVE-2021-20573, CVE-2021-20574)

Summary IBM has announced a release for IBM Security Verify Password Synchronization Plug-in for Windows AD to address several security vulnerabilities. The vulnerabilities concern denial of service and account take over. Vulnerability Details CVEID:CVE-2021-20572 DESCRIPTION: IBM Security Identi...

CVE-2021-26352

Insufficient bound checks in System Management Unit SMU PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of service...

Design/Logic Flaw

Insufficient bound checks in System Management Unit SMU PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of service...

CVE-2021-26352

Insufficient bound checks in System Management Unit SMU PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of service...

Moderate: Red Hat Security Advisory: dovecot security update

An update for dovecot is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

RLSA-2022:1950 Moderate: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. The following packages...

CVE-2021-26352: Improper Restriction of Operations within the Bounds of a Memory Buffer

Insufficient bound checks in System Management Unit SMU PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of service...

PT-2022-9735

Name of the Vulnerable Software and Affected Versions System Management Unit SMU affected versions not specified Description The issue is related to insufficient bound checks in the SMU PCIe Hot Plug table, which may lead to access or updates from or to invalid address space. This could result in...

AMD System Management Unit 缓冲区错误漏洞

AMD System Management Unit SMU is a system management unit of AMD, Inc. A security vulnerability exists in the System Management Unit SMU PCIe Hot Plug, which can be exploited by an attacker to cause a denial of service for invalid address space access or updates...

CVE-2021-26352

Insufficient bound checks in System Management Unit SMU PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of service...

RCE in SiteServer CMS

SiteServer CMS v7.x, which SiteServer UI relies on, allows attackers to execute arbitrary code via a crafted plug-in...

GHSA-Q469-J32F-H7VM RCE in SiteServer CMS

SiteServer CMS v7.x, which SiteServer UI relies on, allows attackers to execute arbitrary code via a crafted plug-in...

CVE-2022-28118

SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in...

CVE-2022-28118

SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in...

CVE-2022-28118: Undefined Security Weakness

SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in...

PT-2022-18823

Name of the Vulnerable Software and Affected Versions SiteServer CMS versions 7.x Description The issue allows attackers to execute arbitrary code via a crafted plug-in. This can be exploited in SiteServer CMS, which is also a dependency for SiteServer UI. Recommendations For SiteServer CMS...

Ukraine government and pro-Ukrainian sites hit by DDoS attacks

The Computer Emergency Response Team in Ukraine CERT-UA has announced that Ukraine government web portals and pro-Ukraine sites are subjected to ongoing DDoS distributed denial of service attacks. They dont currently know who is behind these attacks. The attack involves injecting a malicious...