.NET 7.0 bugfix update

An update is available for dotnet7.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...

.NET Core 3.1 bugfix update

An update is available for dotnet3.1. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...

CVE-2022-31705

creationtimestamp| type| source ---|---|--- 2022-12-14 08:14:08+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus27/2022 2022-12-14 17:30:06+00:00| published-proof-of-concept| https://t.me/truesecator/3827 2022-12-14 22:22:54+00:00| seen| https://t.me/cibsecurity/54552 2023-01-...

CVE-2022-37155

creationtimestamp| type| source ---|---|--- 2022-12-14 02:21:59+00:00| seen| https://t.me/cibsecurity/54490...

Security Bulletin: IBM Tivoli Netcool/OMNIbus Probe and Integrations Library are affected by vulnerabilities in FasterXML jackson-databind (CVE-2022-42004, CVE-2022-42003)

Summary FasterXML jackson-databind is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library and Probe for Microsoft Exchange Web Services. The latest patches include FasterXML jackson-databind 2.13.4.2 that fixes the vulnerabilities. CVE-2022-42004, CVE-2022-42003...

Security Bulletin: IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is affected by vulnerability in Apache Kafka (CVE-2022-34917)

Summary Apache Kafka is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library as part of the Kafka integration. The latest patch includes Apache Kafka 2.8.2 to fix the vulnerability. CVE-2022-34917 Vulnerability Details CVEID:CVE-2022-34917 DESCRIPTION: Apache Kafka is...

CVE-2022-44707

creationtimestamp| type| source ---|---|--- 2022-12-13 22:27:57+00:00| seen| https://t.me/cibsecurity/54454 2023-02-01 13:27:00+00:00| published-proof-of-concept| Telegram/mb6gLoV0NfkmuOkTf3XpsbGOObKIjUlOADh0OzmPtQ0mi4...

CVE-2022-25692

Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

Design/Logic Flaw

Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

PT-2022-17467 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a denial of service in the Modem component due to a reachable assertion while processing the common config procedure. This affects various Qualcomm...

CVE-2022-3982

creationtimestamp| type| source ---|---|--- 2022-12-12 20:21:19+00:00| seen| https://t.me/cibsecurity/54353 2025-04-22 15:03:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12860 2025-12-30 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

CVE-2019-17506

creationtimestamp| type| source ---|---|--- 2022-12-12 13:30:07+00:00| seen| https://t.me/truesecator/3813 2024-10-29 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-10-29 2024-10-30 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabiliti...

CVE-2022-40259

creationtimestamp| type| source ---|---|--- 2022-12-06 00:40:32+00:00| seen| https://t.me/cibsecurity/54039 2022-12-06 11:54:10+00:00| seen| https://t.me/truesecator/3789 2023-07-21 15:30:05+00:00| seen| https://t.me/truesecator/4644 2025-03-19 10:01:34+00:00| seen| https://t.me/itsecnews/5534...

Security Bulletin: IBM InfoSphere Information Server is affected by a denial of service vulnerability in Apache Kafka (CVE-2022-34917)

Summary A denial of service vulnerability in Apache Kafka used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2022-34917 DESCRIPTION: Apache Kafka is vulnerable to a denial of service, caused by improper input validation. By sending a specially-crafted request...

CVE-2022-30123

A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...

DEBIAN-CVE-2022-30123

A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...

UBUNTU-CVE-2022-30123

A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...

Security advisories are falling short. Here's why, with Dustin Childs: Lock and Code S03E25

Decades ago, patching was, to lean into a corny joke, a bit patchy. In the late 90s, the Microsoft operating system OS Windows 98 had a supportive piece of software that would find security patches for the OS so that users could then download those patches and deploy them to their computers. That...

USN-5762-1 binutils vulnerability

It was discovered that GNU binutils incorrectly handled certain COFF files. An attacker could possibly use this issue to cause a crash or execute arbitrary code...

Android Security Bulletin—December 2022Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2022-12-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...