Security Bulletin: IBM Emptoris Contract Management is vulnerable to unspecified vulnerability due to Oracle Database Server (CVE-2021-35576)

Summary IBM Emptoris Contract Management supports usage of Oracle Database Server as a backend application database. Oracle Database Server is vulnerable to unspecified vulnerabilities that has been addressed. Vulnerability Details CVEID: CVE-2021-35576 DESCRIPTION: An unspecified vulnerability i...

Security Bulletin: IBM Emptoris Strategic Supply Management Platform is vulnerable to unspecified vulnerability due to Oracle Database Server (CVE-2021-35576)

Summary IBM Emptoris Strategic Supply Management Platform supports usage of Oracle Database Server as a backend application database. Oracle Database Server is vulnerable to unspecified vulnerabilities that has been addressed. Vulnerability Details CVEID: CVE-2021-35576 DESCRIPTION: An unspecifie...

PT-2022-6839 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A NULL pointer dereference flaw was found in the dbFree function in fs/jfs/jfs dmap.c in the journaling file system JFS of the Linux Kernel. This issue may allow a local attacker to...

VulnCheck KEV: CVE-2022-22718

Microsoft Windows Print Spooler contains an unspecified vulnerability which allow for privilege escalation...

CVE-2022-28041

stbimage.h v2.27 was discovered to contain an integer overflow via the function stbijpegdecodeblockprogdc. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...

VulnCheck KEV: CVE-2022-26904

Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation...

PT-2022-2930 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows DNS Server component. This allows a remote attacker to execute arbitrary code, affecting...

PT-2022-2884 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler. It allows an attacker to elevate their privileges, potentially affecting the system. No...

PT-2022-2667 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Installer component of Windows operating systems. It allows an attacker to potentially elevate their...

PT-2022-2743 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to incorrect code generation management in the Windows DNS Server. It allows remote attackers to execute arbitrary code, affecting the system. Recommendation...

PT-2022-2774 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to incorrect code generation management in the Windows DNS Server component. It allows remote attackers to execute arbitrary code, affecting the system...

PT-2022-2873 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to synchronization errors in the Windows DNS Server component, specifically a "race condition" situation. This allows a remote attacker to execute arbitrary...

PT-2022-2763 · Microsoft +1 · Powershell +2

Name of the Vulnerable Software and Affected Versions: PowerShell affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the PowerShell interpreter, associated with insufficient access restrictions. Exploitation of this issue may allow a...

PT-2022-2815 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to incorrect code generation management in the DNS server of the Microsoft Windows operating system. It allows a remote attacker to execute arbitrary code,...

PT-2022-2941 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler. It allows an attacker to elevate their privileges. Recommendations: At the moment, there is...

PT-2022-2522 · Microsoft · Windows Fax Service +1

Name of the Vulnerable Software and Affected Versions: Windows Fax Service affected versions not specified Description: The issue is related to insufficient input validation in the Windows Fax Service, which can be exploited by remote attackers to execute arbitrary code and affect the system...

PT-2022-2891 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Failover Cluster component of Windows operating systems. It allows an attacker to elevate their privileges. Recommendations: ...

PT-2022-2889 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Advanced Local Procedure Call ALPC handler of the Windows operating system. Exploitation of this issue...

PT-2022-2814 · Microsoft · Windows Fax Compose Form +1

Name of the Vulnerable Software and Affected Versions: Windows Fax Compose Form affected versions not specified Description: The issue is related to insufficient input validation in the Windows Fax Compose Form component. This allows a remote attacker to execute arbitrary code on the system...

PT-2022-2842 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to synchronization errors in the Windows Hyper-V hardware virtualization system, specifically a "race condition" situation. This allows a remote attacker to...