Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to gain privileged access

Vulnerability of the MySQL Cluster component: General database management system vulnerabilities in MySQL Cluster exist due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain privileged access remotely...

The vulnerability of the software package for handwritten input in the Microsoft Windows Inking COM operating system allows a hacker to circumvent security restrictions and gain increased privileges.

The vulnerability of the software package for handwritten input in the Inking COM operating system of Microsoft Windows is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to bypass security restrictions and enhance their privileges...

The vulnerability of the DNS server service in the Microsoft Windows operating system allows a hacker to increase their privileges.

The vulnerability of the DNS server service in the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Report: Nearly 75% of Infusion Pumps Affected by Severe Vulnerabilities

An analysis of data crowdsourced from more than 200,000 network-connected infusion pumps used in hospitals and healthcare entities has revealed that 75% of those medical devices contain security weaknesses that could put them at risk of potential exploitation. "These shortcomings included exposur...

The vulnerability of the Windows Print Spooler daemon in the Windows operating system allows a hacker to escalate their privileges.

The vulnerability of the Windows Print Spooler service in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2022-23594 Out of bounds read in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. The TFG dialect of TensorFlow MLIR makes several assumptions about the incoming GraphDef before converting it to the MLIR-based dialect. If an attacker changes the SavedModel format on disk to invalidate these assumptions and the GraphDef i...

FBI warns of bogus job postings on recruitment sites

Before Christmas was a busy time down at the fake job factory, with all manner of dubious antics out to ruin someone’s day. We’re now info February and the bogus job offers show no sign of abating. In fact, the FBI considers it to be such a problem that its issued an alert. This isn’t your typica...

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software, related to authentication mechanisms that lack sufficient protection, allows attackers to circumvent security restrictions.

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions from a remote location...

CVE-2022-21330 vulnerabilities

Vulnerabilities for packages: mysql...

The vulnerability of the Midnight Commander file manager, related to deficiencies in authentication procedures, allows attackers to compromise data integrity.

The vulnerability of the Midnight Commander file manager is related to the lack of checks and display of server timestamps. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

Business Logic Errors in silverstripe/silverstripe-framework

Description SilverStripe Framework is vulnerable to Business Logic Errors in the Failed login count since that value can be a negative number. Proof of Concept 1.After login, go to Security page under the path /admin/security/ 2.Click on any member record 3.In the member edit form, enter a negati...

CVE-2021-37116

CVE-2021-37116 affects Huawei HarmonyOS PCManager. The vulnerability is described as a weakness introduced during design that could allow changing a subscriber PIN. The NVD entry lists CVSS v3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H with a base score of 9.1 (CRITICAL) and notes impact to confidenti...

The vulnerability of the EtherChannel port in the Cisco NX-OS operating system of Cisco Nexus 9500 Series Switches allows a attacker to gain access to network resources.

The vulnerability of the EtherChannel port in the Cisco NX-OS operating system of Cisco Nexus 9500 Series Switches is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to gain access to network resources remotely...

1.6 Million WordPress Sites Under Cyberattack From Over 16,000 IP Addresses

As many as 1.6 million WordPress sites have been targeted by an active large-scale attack campaign originating from 16,000 IP addresses by exploiting weaknesses in four plugins and 15 Epsilon Framework themes. WordPress security company Wordfence, which disclosed details of the attacks, said...

CVE-2021-37059

There is a Weaknesses Introduced During Design...

CVE-2021-37059

There is a Weaknesses Introduced During Design...

CVE-2021-37059

There is a Weaknesses Introduced During Design...

Design/Logic Flaw

There is a Weaknesses Introduced During Design...

CVE-2021-37059

There is a Weaknesses Introduced During Design...

CVE-2021-37059

Technical details about CVE-2021-37059 are not publicly provided in the supplied documents. Monitor for updates from official advisories to obtain affected products, impact, and remediation information.