UBUNTU-CVE-2022-21283

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows...

CVE-2022-21361

CVE-2022-21361 affects Oracle WebLogic Server (Sample apps component) in Oracle Fusion Middleware. Affected: 12.2.1.4.0 and 14.1.1.0.0. Vulnerability allows unauthenticated, network-accessible (via HTTP) compromise of WebLogic Server; exploitation requires user interaction per the description. Im...

CVE-2022-21277

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows...

CVE-2022-21361: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Sample apps. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic...

Microservice Security: How to Proactively Protect Apps

Microservices are growing in popularity—how can development teams embed seamless security into the entire pipeline? Fernando Cardoso, solutions architect at Trend Micro, breaks it down for you...

PT-2022-2136

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0 through 14.1.1.0.0 Description The issue is related to insufficient input validation in the Sample apps component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access vi...

Security Bulletin: Apache Log4j vulnerability affects IBM Cloud Pak for Automation (CVE-2021-44228)

Summary A remote code execution vulnerability has been reported for log4j-core-2.x libraries, which are used in various components of IBM Cloud Pak for Business Automation. Vulnerability Details CVEID:CVE-2021-44228 DESCRIPTION: Apache Log4j could allow a remote attacker to execute arbitrary code...

PT-2022-9981 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a lack of validation for third-party applications accessing a service, which can lead to information disclosure. This affects various Qualcomm Snapdragon...

Flatpak path traversal vulnerability

Flatpak is an application virtualization system for Linux desktop application computing environments. flatpak is vulnerable and can be exploited by malicious applications to replace appstream util binaries and potentially perform other malicious operations...

Security Updates for Microsoft Office Web Apps (January 2022)

The Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary code. CVE-2022-21840 %NASLMINLEVEL 70300 C...

Microsoft Office 365 Apps for Enterprise Authentication Bypass Privilege Escalation

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to deficiencies in authentication mechanisms. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain increased privileges...

CVE-2022-21867

Windows Push Notifications Apps Elevation of Privilege Vulnerability...

CVE-2022-21867

Windows Push Notifications Apps Elevation of Privilege Vulnerability...

CVE-2022-21867 Windows Push Notifications Apps Elevation of Privilege Vulnerability

...

Description of the security update for Office Web Apps Server 2013: January 11, 2022 (KB5002122)

None None...

CVE-2022-21867: Undefined Security Weakness

Windows Push Notifications Apps Elevation of Privilege Vulnerability...

Microsoft Office code injection vulnerability

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code injection vulnerability exists in Microsoft Office. The following products and version...

KLA12414 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely to execute arbitrary...

KLA20161 ACE vulnerability in Microsoft Apps

Remote code execution vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2023-21780 Exploitation Related products 3D-Builder CVE list CVE-2023-21780 critical KB list Solution Install necessary updates from t...

PT-2022-1502 · Microsoft · Windows Push Notifications Apps +1

Name of the Vulnerable Software and Affected Versions: Windows Push Notifications Apps affected versions not specified Description: The issue is related to insecure privilege management in the Windows Push Notifications Apps component of the Windows operating system. It allows an attacker to...