CVE-2022-28736

There's a use-after-free vulnerability in grubcmdchainloader function; The chainloader command is used to boot up operating systems that doesn't support multiboot and do not have direct support from GRUB2. When executing chainloader more than once a use-after-free vulnerability is triggered. If a...

PT-2023-5439 · Ibm · Ibm Robotic Process Automation For Cloud Pak

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation for Cloud Pak versions 21.0.0 through 21.0.7.4 IBM Robotic Process Automation for Cloud Pak versions 23.0.0 through 23.0.5 Description: The issue is related to the disclosure of server version information, which...

CVE-2022-26563

creationtimestamp| type| source ---|---|--- 2023-07-18 18:32:42+00:00| seen| https://t.me/cibsecurity/66908...

SUSE CVE-2021-31294

Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command specifically, a SET command. NOTE: this was fixed for Redis 6.2.x and 7.x in 2021. Versions before 6.2 were not intended to have safety guarantees related to this...

CVE-2023-35901

IBM Robotic Process Automation 21.0.0 through 21.0.7.6 and 23.0.0 through 23.0.6 is vulnerable to client side validation bypass which could allow invalid changes or values in some fields. IBM X-Force ID: 259380...

PT-2023-25690 · Pimcore · Pimcore

Name of the Vulnerable Software and Affected Versions: pimcore/pimcore versions prior to 10.5.24 Description: The issue is related to SQL Injection in the GitHub repository pimcore/pimcore. Recommendations: For versions prior to 10.5.24, update to version 10.5.24 or later to resolve the issue...

CVE-2023-37952

creationtimestamp| type| source ---|---|--- 2023-07-12 20:25:51+00:00| seen| https://t.me/cibsecurity/66578...

CVE-2020-36756

creationtimestamp| type| source ---|---|--- 2023-07-12 12:41:50+00:00| seen| https://t.me/cibsecurity/66500...

Mozilla Releases Security Update for Firefox and Firefox ESR

Mozilla has released a security update to address a vulnerability in Firefox and Firefox ESR. An attacker could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review Mozilla Security Advisory MFSA 2023-26link is external and apply the...

CVE-2023-36925

SAP Solution Manager Diagnostics agent - version 7.20, allows an unauthenticated attacker to blindly execute HTTP requests. On successful exploitation, the attacker can cause a limited impact on confidentiality and availability of the application and other applications the Diagnostics Agent can...

Access Restriction Bypass

Overview Microsoft.AspNetCore.App.Runtime.linux-musl-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Access Restriction Bypass. A vulnerability exist...

Access Restriction Bypass

Overview Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Access Restriction Bypass. A vulnerability exi...

Microsoft Visual Studio和Microsoft .NET 安全漏洞

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...

July 11, 2023-KB5028937 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2

None None...

PT-2023-5377 · D Link · D-Link Di-7200Gv2

Name of the Vulnerable Software and Affected Versions: D-Link DI-7200G V2 version 21.04.09E1 Description: The issue is related to a buffer overflow in the arp sys.asp component of the D-Link DI-7200G V2 router's firmware when processing the zn jb parameter. This can allow a remote attacker to...

CLSA-2023-1688678245 Fix CVE(s): CVE-2023-2603

SECURITY UPDATE: Integer overflow in libcapstrdup - debian/patches/CVE-2023-2603.patch: enhance libcap's internal strdup code to limit the processing of long strings - CVE-2023-2603...

CVE-2023-30320

creationtimestamp| type| source ---|---|--- 2023-07-06 20:20:27+00:00| seen| https://t.me/cibsecurity/66138...

CVE-2022-45600

creationtimestamp| type| source ---|---|--- 2023-07-06 18:30:59+00:00| seen| https://t.me/cibsecurity/58719...

Bitcoin Core 安全漏洞

Bitcoin Core is an open source client for verifying the validity of blockchain transactions. A security vulnerability exists in version v22 of Bitcoin Core that stems from the presence of a memory management and protection issue that allows an attacker to modify the send address stored in the...

Mobileiron Sentry 安全漏洞

Mobileiron Sentry is a Smart Gateway product from Mobileiron, Inc. A security vulnerability exists in Sentry versions 23.6.0 through 23.6.2 and earlier, which stems from the Sentry API returning an incorrect HTTP header if the request header ends in system.base-hostname...