Cesanta MJS Buffer Overflow Vulnerability (CNVD-2022-09554)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS buffer overflow vulnerability can be exploited by attackers to cause a buffer overflow...

Cesanta MJS Buffer Overflow Vulnerability (CNVD-2022-09551)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS buffer overflow vulnerability can be exploited by attackers to cause a buffer overflow...

Cesanta MJS Buffer Overflow Vulnerability (CNVD-2022-09548)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS buffer overflow vulnerability can be exploited by attackers to cause a buffer overflow...

CISA Adds Eight Known Exploited Vulnerabilities to Catalog

CISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types...

Cesanta MJS Buffer Overflow Vulnerability (CNVD-2022-09546)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS buffer overflow vulnerability can be exploited by attackers to cause a buffer overflow...

Cesanta MJS Buffer Overflow Vulnerability (CNVD-2022-09553)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS buffer overflow vulnerability can be exploited by attackers to cause a buffer overflow...

Cesanta MJS Buffer Overflow Vulnerability (CNVD-2022-09549)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS buffer overflow vulnerability can be exploited by attackers to cause a buffer overflow...

Cesanta MJS Denial of Service Vulnerability (CNVD-2022-09156)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. cesanta MJS denial of service vulnerability can be exploited by attackers to cause a denial of service...

Cesanta MJS Denial of Service Vulnerability (CNVD-2022-09555)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. cesanta MJS denial of service vulnerability can be exploited by attackers to cause a denial of service...

Cesanta MJS Denial of Service Vulnerability (CNVD-2022-09157)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. cesanta MJS denial of service vulnerability can be exploited by attackers to cause a denial of service...

Cesanta MJS Buffer Overflow Vulnerability (CNVD-2022-09550)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS buffer overflow vulnerability can be exploited by attackers to cause a buffer overflow...

Update now! Apple patches another actively used zero-day

Apple has released patches for iOS 15.3, iPadOS 15.3, and macOS Monterey 12.2 and is urging users to update. The most significant reasons are two actively exploited zero-day vulnerabilities, one of which has a publicly disclosed Proof-of-Concept PoC. Using this vulnerability, designated...

Apple Releases iOS and macOS Updates to Patch Actively Exploited 0-Day Vulnerability

Apple on Wednesday released iOS 15.3 and macOS Monterey 12.2 with a fix for the privacy-defeating bug in Safari, as well as to contain a zero-day flaw, which it said has been exploited in the wild to break into its devices. Tracked as CVE-2022-22587, the vulnerability relates to a memory corrupti...

Linux kernel resource management error vulnerability (CNVD-2022-68575)

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel is vulnerable to resource management errors, which can be exploited by attackers to force the reuse of freed memory areas in the Linux kernel via nci request to trigger a denial of service a...

Oracle MySQL Cluster Input Validation Error Vulnerability (CNVD-2022-07925)

Oracle MySQL Cluster is a write-scalable, real-time, ACID-compatible transactional database developed by Oracle Corporation USA. Oracle MySQL Cluster is vulnerable to an input validation error, which can be exploited by attackers to execute arbitrary code...

Dell EMC Data Protection Central Server-Side Request Forgery Vulnerability

Dell Emc Data Protection Central is a management console from Dell USA Inc. It is used for data protection. A server-side request forgery vulnerability exists in Dell EMC Data Protection Central 19.5 and prior versions, which stems from the product's failure to properly validate user input and ca...

Oracle MySQL Cluster Buffer Overflow Vulnerability (CNVD-2022-07920)

Oracle MySQL Cluster is a write-scalable, real-time, ACID-compliant transactional database developed by Oracle Corporation. Oracle MySQL Cluster is vulnerable to a buffer overflow vulnerability that could be exploited by an attacker to read the contents of memory or crash the application...

RHEL 7 : polkit (RHSA-2022:0274)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0274 advisory. The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privilege...

Oracle Linux 8 : polkit (ELSA-2022-0267)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-0267 advisory. 0.115-13.0.1 - Increase timeout to avoid defunct processes Orabug: 26930744 0.115-13.el85.1 - pkexec: argv overflow results in local privilege esc. - Resolves:...

Oracle MySQL Cluster Buffer Overflow Vulnerability (CNVD-2022-07921)

Oracle MySQL Cluster is a write-scalable, real-time, ACID-compliant transactional database developed by Oracle Corporation. Oracle MySQL Cluster is vulnerable to a buffer overflow vulnerability that could be exploited by an attacker to read the contents of memory or crash the application...