13552 matches found
bind9.16 security update
An update is available for bind9.16. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Berkeley Internet Name Domain BIND is an implementation of the Domain Na...
kernel: net: macvlan: fix memory leaks of macvlan_common_newlink
In the Linux kernel, the following vulnerability has been resolved: net: macvlan: fix memory leaks of macvlancommonnewlink kmemleak reports memory leaks in macvlancommonnewlink, as follows: ip link add link eth0 name .. type macvlan mode source macaddr add kmemleak reports: unreferenced object...
Description of the security update for Outlook 2013: August 8, 2023 (KB5002449)
Description of the security update for Outlook 2013: August 8, 2023 KB5002449 Summary This security update resolves a Microsoft Outlook spoofing vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2023-36893. Note: To apply this security...
PT-2023-4377 · Microsoft · Windows Common Log File System Driver +1
Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to insufficient access control in the Windows Common Log File System Driver, which can be exploited to elevate privileges. This allows an...
2022's most routinely exploited vulnerabilities—history repeats
The Cybersecurity and Infrastructure Security Agency CISA, National Security Agency NSA, Federal Bureau of Investigation FBI, and international partners have released a joint Cybersecurity Advisory CSA called the 2022 Top Routinely Exploited Vulnerabilities. We went over the list and it felt like...
CVE-2023-3492
creationtimestamp| type| source ---|---|--- 2023-08-07 18:13:46+00:00| seen| https://t.me/cibsecurity/67875...
CVE-2023-4169
creationtimestamp| type| source ---|---|--- 2023-08-05 22:11:53+00:00| seen| https://t.me/cibsecurity/67815 2023-10-17 16:52:19+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5470 2023-10-20 11:06:20+00:00| seen| https://t.me/CyberSecurityTechnologies/9230 2023-10-22 17:46:15+00:00...
2022 Top Routinely Exploited Vulnerabilities
SUMMARY The following cybersecurity agencies coauthored this joint Cybersecurity Advisory CSA: United States: The Cybersecurity and Infrastructure Security Agency CISA, National Security Agency NSA, and Federal Bureau of Investigation FBI Australia: Australian Signals Directorate’s Australian Cyb...
CISA, NSA, FBI, and International Partners Release Joint CSA on Top Routinely Exploited Vulnerabilities of 2022
The U.S. Cybersecurity and Infrastructure Security Agency CISA, National Security Agency NSA, Federal Bureau of Investigation FBI, and international partners are releasing a joint Cybersecurity Advisory CSA, 2022 Top Routinely Exploited Vulnerabilities. This advisory provides details on the top...
CVE-2023-35082
creationtimestamp| type| source ---|---|--- 2023-08-03 05:38:04+00:00| published-proof-of-concept| https://t.me/CyberWatchinsider/12 2023-08-03 06:21:25+00:00| published-proof-of-concept| https://t.me/thehackernews/3688 2023-08-03 07:23:03+00:00| exploited|...
CVE-2023-37364
In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution. This allows context-dependent attackers to read arbitrary files or cause a denial of service, a similar issue to CVE-2013-4152...
CVE-2023-33370
An uncaught exception vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to cause the main web server of IDSecure to fault and crash, causing a denial of service...
CVE-2023-4045
creationtimestamp| type| source ---|---|--- 2023-08-01 18:38:40+00:00| seen| https://t.me/cibsecurity/67512 2023-08-02 18:10:05+00:00| seen| https://t.me/truesecator/4685...
CVE-2023-38304
creationtimestamp| type| source ---|---|--- 2023-07-31 18:37:52+00:00| seen| https://t.me/cibsecurity/67459...
CVE-2023-3134
creationtimestamp| type| source ---|---|--- 2023-07-31 14:37:43+00:00| seen| https://t.me/cibsecurity/67446...
CVE-2023-37213
Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'...
CVE-2016-10108
creationtimestamp| type| source ---|---|--- 2023-07-28 13:22:17+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/wdmycloudunauthenticatedcmdinjection.rb 2024-10-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-2...
CVE-2023-28013
creationtimestamp| type| source ---|---|--- 2023-07-27 02:28:05+00:00| seen| Telegram/-SC0I8rFPDpK4TYO99Nqx9PJZR2YmOW18WubldzYY4LFJtM...