BELL-CVE-2022-27337 CVE-2022-27337 does not affect BellSoft software

Bulletin has no description...

Chinese Hackers Caught Stealing Intellectual Property from Multinational Companies

An elusive and sophisticated cyberespionage campaign orchestrated by the China-backed Winnti group has managed to fly under the radar since at least 2019. Dubbed "Operation CuckooBees" by Israeli cybersecurity company Cybereason, the massive intellectual property theft operation enabled the threa...

CVE-2021-43159

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the setSessionTime function in /cgi-bin/luci/api/common...

锐捷网络 RG-EW Series Routers 命令注入漏洞

Ruijie RG-EW Series Routers is a router from Ruijie Networks Ruijie, China. A command injection vulnerability exists in Ruijie RG-EW Series Routers, which originates from the setSessionTime function in /cgi-bin/luci/api/common. The following products and versions are affected: ReyeeOS 1.55.1915 /...

CVE-2022-0418

creationtimestamp| type| source ---|---|--- 2022-05-02 20:28:06+00:00| seen| https://t.me/cibsecurity/41739...

GHSA-MXR8-PCPG-M23J Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs

Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors...

CVE-2021-43937

creationtimestamp| type| source ---|---|--- 2022-04-29 20:24:54+00:00| seen| https://t.me/cibsecurity/41662...

AZL-9655 CVE-2022-1249 affecting package pesign 0.112-32

A NULL pointer dereference flaw was found in pesign's cmssetpwdata function of the cmscommon.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign...

CVE-2022-28892

creationtimestamp| type| source ---|---|--- 2022-04-29 10:30:01+00:00| seen| https://t.me/cibsecurity/41591...

CVE-2022-22315

creationtimestamp| type| source ---|---|--- 2022-04-27 22:13:20+00:00| seen| https://t.me/cibsecurity/41528...

Weekly Threat Digest: 18 – 24 April 2022

For a detailed threat digest, download the pdf file here Published Vulnerabilities Interesting Vulnerabilities Active Threat Groups Targeted Countries Targeted Industries ATT&CK TTPs 430 5 2 Worldwide 17 46 The fourth week of April 2022 witnessed the discovery of 430 vulnerabilities out of which ...

cifs-utils缓冲区错误漏洞

cifs-utils is a toolkit from the individual developer Pavel Shilovsky. It provides utilities for managing CIFS network file system installations. A security vulnerability exists in piastry cifs-utils versions prior to 6.14, which stems from a stack-based buffer overflow when the application parse...

gdm bug fix and enhancement update

An update is available for gdm. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The GNOME Display Manager GDM provides the graphical login screen. The screen is...

DL1 bug fix update

An update is available for ipa, python-jwcrypto, custodia, bind-dyndb-ldap, python-qrcode, softhsm, slapi-nis, python-yubico, python-kdcproxy, opendnssec, ipa-healthcheck, pyusb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

pki-core:10.6 bug fix update

An update is available for tomcatjss, jss, pki-core, ldapjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Public Key Infrastructure PKI Core contains...

python-suds bug fix and enhancement update

An update is available for python-suds. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The suds project is a python soap web services client lib. Suds leverages...

java-1.8.0-openjdk security update

An update is available for java-1.8.0-openjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime...

CVE-2022-2511

Cross-site Scripting XSS vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to inject arbitrary HTML into a page using the title parameter of the call URL...

The vulnerability of the object_common1 function in the PHP programming language, related to reading beyond the buffer in memory, allows attackers to trigger a service failure.

The vulnerability of the objectcommon1 function in the PHP programming language is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure by using specially created serialized data, which are incorrectly processed...

EulerOS 2.0 SP5 : ceph-common (EulerOS-SA-2022-1525)

According to the versions of the ceph-common packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the Red Hat Ceph Storage RadosGW Ceph Object Gateway. The vulnerability is related to the injection of HTTP headers via...