PT-2022-2922 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System CLFS Driver affected versions not specified Description: The issue is related to insecure privilege management in the Windows Common Log File System CLFS driver of the Microsoft Windows operating system...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-24481)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

PT-2022-2241

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description This issue is an elevation-of-privilege vulnerability affecting the Windows Common Log File System Driver. Successful exploitation could allow attackers to affec...

CVE-2022-22255

The application framework has a common DoS vulnerability.Successful exploitation of this vulnerability may affect the availability...

CVE-2022-1296

creationtimestamp| type| source ---|---|--- 2022-04-11 16:16:03+00:00| seen| https://t.me/cibsecurity/40459...

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. This updat...

Arbitrary File Write

hadoop-common is vulnerable to arbitrary file write.The vulnerable exists in the function unTar in FileUtil.java which allows an attacker to extract arbitrary files using symlink name...

CVE-2022-22954

creationtimestamp| type| source ---|---|--- 2022-04-07 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=775 2022-04-07 07:51:03+00:00| seen| https://t.me/thehackernews/2058 2022-04-07 15:10:55+00:00| seen| https://t.me/ptswarm/119 2022-04-11 10:48:25+00:00|...

The vulnerability of the CGI microprogramming system handlers of ZyXEL NBG6816 (Armor Z1) and NBG6817 (Armor Z2) allows a hacker to execute arbitrary commands.

The vulnerability of CGI microprogramming system processors in Wi-Fi routers from ZyXEL NBG6816 Armor Z1 and NBG6817 Armor Z2 lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow attackers to execute...

CVE-2022-20762

A vulnerability in the Common Execution Environment CEE ConfD CLI of Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure SMI software could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to insufficient access control in...

CVE-2022-20762

A vulnerability in the Common Execution Environment CEE ConfD CLI of Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure SMI software could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to insufficient access control in...

CVE-2022-20762 Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure Privilege Escalation Vulnerability

A vulnerability in the Common Execution Environment CEE ConfD CLI of Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure SMI software could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to insufficient access control in...

CVE-2022-20762 Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure Privilege Escalation Vulnerability

A vulnerability in the Common Execution Environment CEE ConfD CLI of Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure SMI software could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to insufficient access control in...

CVE-2022-27124

creationtimestamp| type| source ---|---|--- 2022-04-06 00:29:17+00:00| seen| https://t.me/cibsecurity/40212...

SSL Certificate with no Common Name

The remote system is providing an SSL/TLS certificate without a subject common name field. While this is not required in all cases, it is recommended to ensure broad compatibility. TRUSTED...

CVE-2021-32986

creationtimestamp| type| source ---|---|--- 2022-04-05 00:28:21+00:00| seen| https://t.me/cibsecurity/40137...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Common Reporting and IBM Tivoli Monitoring shipped with IBM Systems Director Editions.

Summary Tivoli Common Reporting and IBM Tivoli Monitoring are shipped as components of IBM Systems Director Editions. Information about security vulnerabilities affecting the above components has been published in a security bulletin. Vulnerability Details Please consult the security bulletins...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Common Reporting and IBM Tivoli Monitoring shipped with IBM Systems Director Editions.

Summary Tivoli Common Reporting and IBM Tivoli Monitoring are shipped as components of IBM Systems Director Editions. Information about security vulnerabilities affecting the above components has been published in a security bulletin. Vulnerability Details Please consult the security bulletins...

ASB-A-208277166

In ionioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2022-22965

creationtimestamp| type| source ---|---|--- 2022-03-31 13:45:50+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1756 2022-03-31 14:20:55+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1757 2022-03-31 14:38:31+00:00| published-proof-of-concept|...