13597 matches found
Weekly Threat Digest: 18 – 24 April 2022
For a detailed threat digest, download the pdf file here Published Vulnerabilities Interesting Vulnerabilities Active Threat Groups Targeted Countries Targeted Industries ATT&CK TTPs 430 5 2 Worldwide 17 46 The fourth week of April 2022 witnessed the discovery of 430 vulnerabilities out of which ...
cifs-utils缓冲区错误漏洞
cifs-utils is a toolkit from the individual developer Pavel Shilovsky. It provides utilities for managing CIFS network file system installations. A security vulnerability exists in piastry cifs-utils versions prior to 6.14, which stems from a stack-based buffer overflow when the application parse...
gdm bug fix and enhancement update
An update is available for gdm. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The GNOME Display Manager GDM provides the graphical login screen. The screen is...
DL1 bug fix update
An update is available for ipa, python-jwcrypto, custodia, bind-dyndb-ldap, python-qrcode, softhsm, slapi-nis, python-yubico, python-kdcproxy, opendnssec, ipa-healthcheck, pyusb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
pki-core:10.6 bug fix update
An update is available for tomcatjss, jss, pki-core, ldapjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Public Key Infrastructure PKI Core contains...
python-suds bug fix and enhancement update
An update is available for python-suds. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The suds project is a python soap web services client lib. Suds leverages...
java-1.8.0-openjdk security update
An update is available for java-1.8.0-openjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime...
CVE-2022-2511
Cross-site Scripting XSS vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to inject arbitrary HTML into a page using the title parameter of the call URL...
EulerOS 2.0 SP5 : ceph-common (EulerOS-SA-2022-1525)
According to the versions of the ceph-common packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the Red Hat Ceph Storage RadosGW Ceph Object Gateway. The vulnerability is related to the injection of HTTP headers via...
The vulnerability of the object_common1 function in the PHP programming language, related to reading beyond the buffer in memory, allows attackers to trigger a service failure.
The vulnerability of the objectcommon1 function in the PHP programming language is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure by using specially created serialized data, which are incorrectly processed...
Huawei EulerOS: Security Advisory for ceph-common (EulerOS-SA-2022-1525)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-22435
creationtimestamp| type| source ---|---|--- 2022-04-21 20:26:56+00:00| seen| https://t.me/cibsecurity/41237...
java-11-openjdk security update
An update is available for java-11-openjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-11-openjdk packages provide the OpenJDK 11 Java Runtime...
Smap - A Drop-In Replacement For Nmap Powered By Shodan.Io
Smap is a replica of Nmap which uses shodan.io's free API for port scanning. It takes same command line arguments as Nmap and produces the same output which makes it a drop-in replacament for Nmap. Features Scans 200 hosts per second Doesn't require any account/api key Vulnerability detection...
CVE-2022-29153
creationtimestamp| type| source ---|---|--- 2022-04-19 20:24:31+00:00| seen| https://t.me/cibsecurity/41103 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-02-10 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-10...
CVE-2022-29464
creationtimestamp| type| source ---|---|--- 2022-04-19 02:23:44+00:00| seen| https://t.me/cibsecurity/41082 2022-04-20 23:48:37+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1993 2022-04-21 08:52:01+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/1969 2022-04-21...
CVE-2022-27652
creationtimestamp| type| source ---|---|--- 2022-04-18 20:29:44+00:00| seen| https://t.me/cibsecurity/41043 2023-09-15 18:25:30+00:00| seen| https://t.me/cibsecurity/70595...
CVE-2015-8391
creationtimestamp| type| source ---|---|--- 2022-04-18 17:19:15+00:00| seen| https://t.me/truesecator/2858...
CVE-2021-34552
creationtimestamp| type| source ---|---|--- 2022-04-18 17:19:15+00:00| seen| https://t.me/truesecator/2858...
.NET Core 3.1 on Rocky Linux 8 bugfix update
An update is available for dotnet3.1. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...