CVE-2021-4028

A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free. Given the ability to execute code, a local attacker could leverage this...

Softing smartLink SW-HT 安全漏洞

The Softing smartLink SW-HT is a HART multiplexer from Softing that provides simple and fast access to HART field devices without additional hardware. A security vulnerability exists in the Softing smartLink SW-HT that arises from enabling weak passwords during secure communications SSL...

CVE-2022-30264

The CVE-2022-30264 issue affects Emerson ROC and FloBoss RTU lines (through 2022-05-02) where the ROC protocol on 4000/5000 TCP uses Opcode 203 to transfer files to/from flash, enabling arbitrary file read/write/delete. This constitutes insecure filesystem operations with high impact (confidentia...

Black Hat and DEF CON Roundup

There was nothing typical this year at BSides LV, Black Hat USA and DEF CON – also known collectively as Hacker Summer Camp. The weeklong collection of cybersecurity conferences featured an eclectic mix of attendees to learn, network, hack and have fun. The week even included a rare Las Vegas fla...

[SECURITY] Fedora 35 Update: gnutls-3.7.7-1.fc35

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...

Splunk Enterprise < 9.0 Multiple Vulnerabilities

The version of Splunk installed on the remote host is prior to 9.0. It is, therefore, affected by multiple vulnerabilities. - The httplib and urllib Python libraries that Splunk shipped with Splunk Enterprise did not validate certificates using the certificate authority CA certificate stores by...

CVE-2022-20816

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This...

CVE-2022-20816

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This...

Code injection

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This...

CVE-2022-20816 Cisco Unified Communications Manager Arbitrary File Deletion Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This...

CVE-2022-20816

CVE-2022-20816 involves Cisco Unified Communications Manager (CUCM) and Unified CM Session Management Edition (Unified CM SME). The issue is in the web-based management interface where requests are not properly validated, allowing an authenticated, remote attacker to delete arbitrary files by sen...

CVE-2022-20816 Cisco Unified Communications Manager Arbitrary File Deletion Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This...

The vulnerability of the web interfaces of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition allows a perpetrator to delete arbitrary files.

The vulnerability of the Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition web interfaces is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to delete...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google Inc. in the United States. A security vulnerability previously existed in Google Chrome version 97.0.4692.71, which stemmed from a post-release reuse issue in the WebRTC module...

CVE-2022-20816

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This...

Cisco Unified Communications Manager Arbitrary File Deletion Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This...

PT-2022-3982 · Cisco · Cisco Unified Communications Manager Session Management Edition +1

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager Unified CM versions affected versions not specified Cisco Unified Communications Manager Session Management Edition Unified CM SME versions affected versions not specified Description: A vulnerability in t...

Cisco Unified Communications Manager 路径遍历漏洞

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A path traversal vulnerability...

The vulnerability of the Billing Care component of Oracle Communications’ Billing and Revenue Management software allows a perpetrator to execute arbitrary codes.

The vulnerability of the Billing Care component of Oracle Communications’ Billing and Revenue Management software exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

EulerOS 2.0 SP10 : xz (EulerOS-SA-2022-2149)

According to the versions of the xz packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the Oracle Communications Cloud Native Core Unified Data Repository product of Oracle Communications component: UDR GNU Gzip. The...