CVE-2023-21824

CVE-2023-21824 affects Oracle Communications BRM – Elastic Charging Engine, within Oracle Communications Applications. Affected versions are 12.0.0.3.0 through 12.0.0.7.0. The vulnerability allows a high-privilege attacker who can log on to the infrastructure where the Elastic Charging Engine run...

PT-2023-1184 · Oracle · Oracle Communications Converged Application Server

Name of the Vulnerable Software and Affected Versions: Oracle Communications Converged Application Server versions 7.1.0 through 8.0.0 Description: The issue is related to insufficient input validation in the Core component of the Oracle Communications Converged Application Server, allowing an...

Shopware 输入验证错误漏洞

Shopware is a suite of open source e-commerce software from German company Shopware. An input validation error vulnerability exists in Shopware, which arises from a failure to fully check the double validation of communications and can skip parts of the process...

CVE-2023-22597

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-319: Cleartext Transmission of Sensitive Information. They use an unsecured channel to communicate with the cloud platform by default. An...

CVE-2022-43539

A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that allows for unauthorized actions as a...

CVE-2022-43539

A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that allows for unauthorized actions as a...

CVE-2022-43539

A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that allows for unauthorized actions as a...

PT-2023-14250 · Aruba · Aruba Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.7 and below Aruba ClearPass Policy Manager versions 6.9.12 and below Description: A vulnerability exists in the ClearPass Policy Manager cluster communications, allowing an attacker in a privileged...

The vulnerability of the Ethernet interfaces of Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino lies in the execution of operations outside the buffer in memory, allowing attackers to cause system failures.

The vulnerability of the Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures using specially created OPC packets...

Trojan.Win32.DarkNeuron.gen MVID-2022-0661 Named Pipe NULL DACL

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/d891c9374ccb2a4cae2274170e8644d8.txt Contact: [email protected] Media: twitter.com/malvuln Backup media: infosec.exchange/@malvuln Threat: Trojan.Win32.DarkNeuron.gen Vulnerability: Named...

D-Link DIR-3060 Buffer Overflow Vulnerability

D-Link DIR-3060 is a router from China Friendship Communications D-Link Inc. It provides a function to connect to the network.The D-Link DIR-3060 DIR3060A1FW111B04.bin version contains a buffer overflow vulnerability, which stems from a boundary error in FUN0049ac18 when handling untrusted input....

ALSA-2022:7979 Low: speex security update

Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates. Security Fixes: speex: divide by zero in readsamples via crafted WAV file CVE-2020-23903 For more details about the security issues, including the impact, a CVSS...

CVE-2022-40903

Aiphone GT-DMB-N 3-in-1 Video Entrance Station with NFC Reader 1.0.3 does not mitigate against repeated failed access attempts, which allows an attacker to gain administrative privileges...

PT-2022-34901 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v6.0.3 through v6.0.7 Description: The issue is related to an unintentional integer overflow in the ACPI PCC component. The actual impact and potential for attack have not been proven yet. Recommendations: For Linux Kern...

Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to loss of confidentiality due to CVE-2022-0235

Summary Node.js module node-fetch is used by IBM App Connect Enterprise Certified Container for HTTP communications. IBM App Connect Enterprise Certified Container operands may be vulnerable to loss of confidentiality. This bulletin provides patch information to address the reported vulnerability...

[SECURITY] Fedora 37 Update: openssl-3.0.5-3.fc37

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

[SECURITY] Fedora 36 Update: openssl-3.0.5-2.fc36

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

Australian Defence Force Communications Service Hit by Ransomware Attack

By Deeba Ahmed According to Matt Thistlethwaite, assistant minister for defense, there is no evidence to believe that data belonging to serving and retired military personnel have been compromised. This is a post from HackRead.com Read the original post: Australian Defence Force Communications...

PT-2022-7016 · Cisco · Cisco Unified Communications Products

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Products affected versions not specified Description: A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU...

Oracle WebCenter Portal Multiple Vulnerabilities (Oct 2022 CPU)

The version of Oracle WebCenter Portal installed on the remote host is missing a security patch from the Oct 2022 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilites: - Vulnerability in the Oracle Communications Convergence product of Oracle Communications Application...