CVE-2022-37397 The software is vulnerable when using LDAP-based authentication in YCQL with Microsoft’s Active Directory

An issue was discovered in the YugabyteDB 2.6.1 when using LDAP-based authentication in YCQL with Microsoft’s Active Directory. When anonymous or unauthenticated LDAP binding is enabled, it allows bypass of authentication with an empty password...

Intel Active Management Technology (AMT) Multiple Vulnerabilities (INTEL-SA-00709) (remote check)

The Intel Management Engine on the remote host has Active Management Technology AMT enabled, and, according to its self-reported version, is a version containing multiple vulnerabilities, including the following: - Insufficiently protected credentials for IntelR AMT and IntelR Standard...

The vulnerability of the Active Directory Domain Services service on the Windows operating system allows a perpetrator to increase their privileges.

The vulnerability of the Active Directory Domain Services service on the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Intel Active Management Technology (AMT) Multiple Vulnerabilities (INTEL-SA-00709)

Binary data wmiINTEL-SA-00709.nbin...

PT-2022-23972 · Yugabyte +1 · Yugabytedb +1

Name of the Vulnerable Software and Affected Versions: YugabyteDB version 2.6.1 Description: An issue was discovered when using LDAP-based authentication in YCQL with Microsoft’s Active Directory. If anonymous or unauthenticated LDAP binding is enabled, it allows bypass of authentication with an...

The vulnerability of the ActiveDirectory/DC database audit log management module in the Samba networking software package allows a perpetrator to trigger a service failure.

The vulnerability of the ActiveDirectory/DC log management module in the Samba networking software package is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

OESA-2022-1816 samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue ...

OESA-2022-1817 samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue ...

CVE-2022-0028

creationtimestamp| type| source ---|---|--- 2022-08-10 20:26:11+00:00| seen| https://t.me/cibsecurity/47870 2022-08-11 18:10:03+00:00| seen| https://t.me/truesecator/3282 2022-08-12 13:04:20+00:00| seen| https://t.me/itsecnews/1184 2022-08-23 13:21:28+00:00| exploited|...

CVE-2022-33927

Dell Wyse Management Suite 3.6.1 and below contains a Session Fixation vulnerability. A unauthenticated attacker could exploit this by taking advantage of a user with multiple active sessions in order to hijack a user's session...

CVE-2022-33927

Dell Wyse Management Suite 3.6.1 and below contains a Session Fixation vulnerability. A unauthenticated attacker could exploit this by taking advantage of a user with multiple active sessions in order to hijack a user's session...

Intel Active Management Technology 安全漏洞

Intel Active Management Technology AMT is a suite of hardware-based remote active management technology software for computers from Intel Corporation. A security vulnerability exists in Intel Active Management Technology , Standard Manageability versions prior to August 9, 2022, which stems from...

Microsoft Windows Multiple Vulnerabilities (KB5016681)

This host is missing an important security update according to Microsoft KB5016681 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5016676)

This host is missing an important security update according to Microsoft KB5016676 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Intel Active Management Technology 安全漏洞

Intel Active Management Technology AMT is a suite of hardware-based remote active management technology software for computers from Intel Corporation. Intel Active Management Technology , Standard Manageability A security vulnerability exists in versions prior to August 9, 2022, which stems from...

Vulnerabilities fixed in Intel products

Vulnerabilities have been fixed in several Intel products. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS. Bypassing authentication Accessing sensitive data Increased user privileges The...

Intel Open AMT Cloud Toolkit 安全漏洞

Intel Open AMT Cloud Toolkit is an open source cloud toolkit from Intel Corporation USA. A security vulnerability exists in Intel Open AMT Cloud Toolkit. An attacker exploited the vulnerability to elevate privileges...

Microsoft Windows Multiple Vulnerabilities (KB5016616)

This host is missing an important security update according to Microsoft KB5016616 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5016639)

This host is missing an important security update according to Microsoft KB5016639 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Intel Active Management Technology 安全漏洞

Intel Active Management Technology AMT is a suite of hardware-based remote active management technology software for computers from Intel Corporation. Intel Active Management Technology , Standard Manageability A security vulnerability exists in versions prior to August 9, 2022, which arises from...