12582 matches found
SUSE-SU-2022:2529-1 Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2022-34903: Fixed a status injection vulnerability bsc1201225...
DSA-5186-1 djangorestframework - security update
Bulletin has no description...
JVN#75063798: Booked vulnerable to open redirect
Booked provided by Twinkle Toes Software contains an open redirect vulnerability CWE-601. Impact When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack. Solution Update the software Update the...
Apple Safari Security Update (HT213341)
Apple Safari is prone to multiple vulnerabilities according to Apple security advisory. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2022-20892 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly, resulting in a denial of...
CVE-2022-20897 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly, resulting in a denial of...
CVE-2022-20877
CVE-2022-20877 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The issue stems from insufficient validation of user fields in incoming HTTP packets via the web-based management interface, enabling an authenticated attacker with administrator credentials to execute arbitrar...
Driver Disk for Cisco enic 4.2.0.26 - For Citrix Hypervisor 8.2 LTSR
Who Should Install this Driver Disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Cisco's enic driver and wish to use the latest version of the following: Driver Module| Version ---|--- enic| 4.2.0.26 Issues Resolved In this Driver Disk Includes general enhancements and bug...
PT-2022-3851 · Sonicwall · Sonicwall Analytics On-Prem +1
Name of the Vulnerable Software and Affected Versions: SonicWall GMS versions 9.3.1-SP2-Hotfix1 and earlier SonicWall Analytics On-Prem versions 2.5.0.3-2520 and earlier Description: The issue is related to the improper neutralization of special elements used in an SQL command, leading to an...
PT-2022-23309 · Npm · File-Type
Name of the Vulnerable Software and Affected Versions: file-type versions 13.0.0 through 16.5.4 file-type versions 17.x before 17.1.3 Description: An issue was discovered in the file-type package for Node.js. A malformed MKV file could cause the file type detector to get caught in an infinite loo...
Cisco Nexus Dashboard SSL Certificate Validation Vulnerability
A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to alter communications with associated controllers or view sensitive information. This vulnerability exists because SSL server certificates are not validated when Cisco Nexus...
PT-2022-21547 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 Description: The issue allows an app to potentially access user-sensitive data. It was addressed by enabling hardened runtime. Recommendations: For versions prior to 12.5, update to macOS Monterey 12.5 to resolve...
PT-2022-21466 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to Security Update 2022-005 Catalina macOS versions prior to 11.6.8 Big Sur macOS versions prior to 12.5 Monterey Description: An issue in the handling of environment variables was addressed with improved validation. This...
PT-2022-21520 · Apple · Macos Monterey +2
Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions prior to 11.6.8 macOS Monterey versions prior to 12.5 Description: A logic issue was addressed with improved checks, which may have allowed an app to capture a user's screen. Recommendations: For macOS Big Sur versions...
PT-2022-21767
Name of the Vulnerable Software and Affected Versions ICONICS GENESIS64 versions 10.97.1 and prior Mitsubishi Electric MC Works64 versions 4.04E 10.95.210.01 and prior Description The issue allows a remote unauthenticated attacker to disclose information on memory or cause a Denial of Service DoS...
PT-2022-21477 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 Description: An out-of-bounds write issue was addressed with improved input validation, which may allow an app to gain elevated privileges. Recommendations: For versions prior to 12.5, update to macOS Monterey 12....
PT-2022-21511 · Apple · Ios +3
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 tvOS versions prior to 15.6 iOS versions prior to 15.6 iPadOS versions prior to 15.6 Description: The issue allows an app to potentially cause unexpected system termination or write kernel memory due to inadequate...
PT-2022-22264 · Unknown +1 · Riscv-Boom +1
Name of the Vulnerable Software and Affected Versions: CVA6 version d315ddd0f1be27c1b3f27eb0b8daf471a952299a RISCV-Boom version ad64c5419151e5e886daee7084d8399713b46b4b Description: The issue arises from the implementation of the incorrect exception type when a PMP violation occurs during address...
New Netwrix Auditor Bug Could Let Attackers Compromise Active Directory Domain
Researchers have disclosed details about a security vulnerability in the Netwrix Auditor application that, if successfully exploited, could lead to arbitrary code execution on affected devices. "Since this service is typically executed with extensive privileges in an Active Directory environment,...