CVE-2022-22683

Buffer copy without checking size of input 'Classic Buffer Overflow' vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote attackers to execute arbitrary code via unspecified vectors...

Security Bulletin: IBM Common Licensing is vulnerable by a remote code attack in Spring Framework and Apache Commons(CVE-2022-22970,CVE-2022-22971,CVE-2022-33980)

Summary IBM Common Licensing is vulnerable to a remote code execution in Spring Framework CVE-2022-22970,CVE-2022-22971 as it does have Spring Framework versions 5.3.0 to 5.3.20, 5.2.0 to 5.2.22, and older versions. IBM Common Licensing is vulnerable to a remote code execution in Apache Commons...

CVE-2022-2511

Cross-site Scripting XSS vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to inject arbitrary HTML into a page using the title parameter of the call URL...

BlueSpice 跨站脚本漏洞

BlueSpice is free Wiki software from BlueSpice based on the MediaWiki engine. A security vulnerability exists in the BlueSpice 4.x series of releases, which stems from a commonuserinterface component that allows an attacker to inject arbitrary HTML into a page using the title parameter of the...

CVE-2022-2487

creationtimestamp| type| source ---|---|--- 2022-07-20 16:19:56+00:00| seen| https://t.me/cibsecurity/46638 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-02-08 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-08...

CVE-2022-2469

creationtimestamp| type| source ---|---|--- 2022-07-19 20:41:02+00:00| seen| https://t.me/cibsecurity/46569 2026-04-04 18:27:52+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mioufnqhuk22...

Vulnerabilities & Threats that Matter 11-17 July 2022

Published Vulnerabilities Interesting Vulnerabilities Active Threat Groups Targeted Countries Targeted Industries ATT&CK TTPs 580 37 2 World-wide 11 61 For a detailed threat digest, download the pdf file here Summary The second week of July 2022 witnessed the discovery of 580 vulnerabilities out ...

@accordproject/cicero-cli (>=0.2.48, <=0.8.0), @accordproject/cicero-common (>=0.2.50, <=0.3.17) +102 more potentially affected by CVE-2020-7677 via thenify (>=3.0.0, <=3.3.0)

thenify NPM version =3.0.0, =0.2.48, =0.2.50, =0.2.46, =0.2.46, =0.2.46, =0.0.37, =0.0.36, =0.0.37, =0.1.0, =0.1.0, =2.1.1, =0.1.0, =0.2.2 and more Source cves: CVE-2020-7677 Source advisory: OSV:GHSA-29XR-V42J-R956...

Web Application Firewall Detected

A Web Application Firewall WAF has been detected during the scan. A WAF is designed to help protecting web applications by monitoring and filtering HTTPS traffic through a set of rules in order to prevent the most common attacks. The identified WAF may have blocked several requests during the...

CVE-2022-26481

An issue was discovered in Poly Studio before 3.7.0. Command Injection can occur via the CN field of a Create Certificate Signing Request CSR action...

CVE-2022-26481

An issue was discovered in Poly Studio before 3.7.0. Command Injection can occur via the CN field of a Create Certificate Signing Request CSR action...

CVE-2022-32308

creationtimestamp| type| source ---|---|--- 2022-07-14 00:40:09+00:00| seen| https://t.me/cibsecurity/46211...

CVE-2018-16763

creationtimestamp| type| source ---|---|--- 2022-07-13 13:02:16+00:00| seen| MISP/8bf50bb8-94dd-4004-a646-5f78db6f0b6a 2024-12-23 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-23 2024-12-27 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

CVE-2022-30206

creationtimestamp| type| source ---|---|--- 2022-07-13 02:25:53+00:00| seen| https://t.me/cibsecurity/46125 2022-09-24 17:53:01+00:00| published-proof-of-concept| https://t.me/proxybar/1006 2022-09-25 07:55:29+00:00| published-proof-of-concept| https://t.me/cKure/10234 2022-09-26 00:52:21+00:00|...

CVE-2022-30220

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2022-30220

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

Privilege escalation

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2022-34285

creationtimestamp| type| source ---|---|--- 2022-07-12 14:20:19+00:00| seen| https://t.me/cibsecurity/45975...

KLA12581 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, obtain sensitive information, execute arbitrary code, cause denial of service. Below is a complete list of...

SAMSUNG Mobile devices telephony-common.jar 日志信息泄露漏洞

Samsung telephony-common.jar is a Telephony service for Samsung mobile devices that provides support for the Telephony Application Programming Interface TAPI. A local attacker with log access could exploit the vulnerability to obtain IMSI through device logs...