Adobe Acrobat DC (Continuous) Security Update (APSB21-29) - Windows

Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to security configuration errors, allowing attackers to bypass security measures.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to security configuration errors. Exploiting this vulnerability can allow attackers to bypass security measures...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves errors in resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

The vulnerability of the InnoDB component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the MySQL Database Management System is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service interruptions using the network MySQL protocol...

Vulnerability of the Server: Group Replication Plugin component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Group Replication Plugin component of the MySQL Server database management system is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

Vulnerability of the MySQL Server component of the Server: Federated database management system, which allows attackers to cause service interruptions.

The vulnerability of the MySQL Server component of the MySQL database management system is related to errors in resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

The vulnerability of the HTML platform of the Microsoft Windows operating system, which allows a perpetrator to disclose protected information

The vulnerability of the HTML platform of the Microsoft Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Cannot input Simplified/Traditional Chinese or Japanese in Windows server 2019/2022 or Windows 10/11

For Windows Server 2019/2022 English OS or Windows 10/11 as VDA, CWA Windows Client uses Microsoft Pinyin IME to input simplified Chinese, Microsoft Bopomofo IME to input traditional Chinese, or Microsoft Japanese IME to input Japanese, keyboard sync mode is configured as "Sync only once" in...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component involves errors in resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

The vulnerability of the access control tool for corporate applications and Microsoft Intune Company Portal for iOS is related to security configuration errors, allowing a perpetrator to circumvent security restrictions.

The vulnerability of the access control mechanism for corporate applications and Microsoft Intune Company Portal for iOS is related to security configuration errors. Exploiting this vulnerability could allow a perpetrator to circumvent security restrictions...

Vulnerability of the Server component: The Information Schema of the MySQL Server database management system, which allows a hacker to cause a service failure.

Vulnerability of the MySQL Server component: The information schema of the MySQL Server database management system is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the MySQL network protocol...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component involves errors in resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component involves errors in resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

PT-2022-2046 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows User Profile Service. This vulnerability is caused by errors in privilege management. Exploitation of this iss...

The vulnerability of the snapd package management tool, related to hard link errors, allows a perpetrator to escalate their privileges.

The vulnerability of the ductile management for self-contained packages in Snapd is related to errors in hard links. Exploiting this vulnerability can allow attackers to enhance their privileges...

CLSA-2022-1648136411 Fix of CVE: CVE-2022-22721, CVE-2022-22719, CVE-2022-23943, CVE-2022-22720

CVE-2022-22719: modlua: error out if luareadbody or luawritebody fail - CVE-2022-22720: simpler connection close logic if discarding the request body fails - CVE-2022-22721: make sure and check that LimitXMLRequestBody fits in system memory - CVE-2022-23943: modsed: use sizet to allow for larger...

DEBIAN-CVE-2022-24757

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications. Prior to version 1.15.4, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are...

PYSEC-2022-179

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications. Prior to version 1.15.4, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are...

UBUNTU-CVE-2022-24757

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications. Prior to version 1.15.4, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open-source operating system Linux.KVM is one of the kernel-based virtual machines. Linux kernel suffers from an information disclosure vulnerability that arises from errors in configuration and other errors in the operation of a networked...