CVE-2021-26264

A specially crafted script could cause the DeltaV Distributed Control System Controllers All Versions to restart and cause a denial-of-service condition...

CVE-2021-44463 Emerson DeltaV Uncontrolled Search Path Element

Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and Workstations All versions when some DeltaV services are started...

CVE-2021-26264

CVE-2021-26264 affects Emerson DeltaV Distributed Control System Controllers and Workstations (All Versions) due to Missing Authentication for Critical Function, allowing a specially crafted script to restart a controller and cause a denial-of-service. Root cause per public records is an access/a...

PT-2022-9723

Name of the Vulnerable Software and Affected Versions DeltaV Distributed Control System Controllers All Versions Description A specially crafted script could cause the DeltaV Distributed Control System Controllers to restart, resulting in a denial-of-service condition. Recommendations At the...

PT-2022-12123

Name of the Vulnerable Software and Affected Versions DeltaV Distributed Control System Controllers and Workstations All versions Description The issue allows an attacker to achieve local privilege escalation when some DeltaV services are started, by replacing missing DLLs. This could be done by ...

CVE-2021-26264: Missing Authentication for Critical Function

A specially crafted script could cause the DeltaV Distributed Control System Controllers All Versions to restart and cause a denial-of-service condition...

CVE-2021-46377

There is a front-end sql injection vulnerability in cszcms 1.2.9 via cszcms/controllers/Member.phpviewUser...

PT-2022-12679

Name of the Vulnerable Software and Affected Versions cszcms version 1.2.9 Description The issue is related to a front-end sql injection vulnerability. It affects the cszcms/controllers/Member.php file, specifically the viewUser section. Recommendations For cszcms version 1.2.9, consider...

CVE-2021-46377: Improper Neutralization of Special Elements used in an SQL Command

There is a front-end sql injection vulnerability in cszcms 1.2.9 via cszcms/controllers/Member.phpviewUser...

kernel: race condition for removal of the HCI controller

A flaw was found in the Linux kernel’s handling of the removal of Bluetooth HCI controllers. This flaw allows an attacker with a local account to exploit a race condition, leading to corrupted memory and possible privilege escalation. The highest threat from this vulnerability is to...

January 18, 2022—KB5010791 (OS Build 17763.2458) Out-of-band

None None...

KB5010799: Out-of-band update for Windows Server 2008 SP2: January 17, 2022

KB5010799: Out-of-band update for Windows Server 2008 SP2: January 17, 2022 Summary This update resolves the following issues: Active Directory attributes are not written correctly during a Lightweight Directory Access Protocol LDAP modify operation with multiple specific attribute changes. Windo...

January 17, 2022—KB5010793 (OS Builds 19042.1469, 19043.1469, and 19044.1469) Out-of-band

None None...

Citrix PVS soap server service does not start and crashes after installing Microsoft January 2022 Updates (E.g. KB5008877 or KB5009546)

Since installing Microsoft January 2022 Updates like KB5009546 or KB5008877 the Citrix PVS soap server service doesn't start anymore. When trying to start this service it crashes right away. While this happens the Citrix PVS API service also stops working. Soapserver.exe crashes Event 1000 .net...

Storefront unable to communicate with Delivery controllers over HTTPS.

SSL Error on Storefront Event Logs:...

Microsoft Yanks Buggy Windows Server Updates

Microsoft has yanked the Windows Server updates it issued on Patch Tuesday after admins found that the updates had critical bugs that break three things: They trigger spontaneous boot loops on Windows servers that act as domain controllers, break Hyper-V and render ReFS volume systems unavailable...

CVE-2021-32996

The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to crash. A restart is required...

CVE-2021-32996

The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to crash. A restart is required...

CVE-2021-32998

The FANUC R-30iA and R-30iB series controllers are vulnerable to an out-of-bounds write, which may allow an attacker to remotely execute arbitrary code. INIT START/restore from backup required...

CVE-2021-32998

The FANUC R-30iA and R-30iB series controllers are vulnerable to an out-of-bounds write, which may allow an attacker to remotely execute arbitrary code. INIT START/restore from backup required...