KB5014986: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012 R2

KB5014986: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012 R2 Summary This update includes improvements for the following issue: Addresses a known issue that might cause authentication failures for some services on a serve...

KB5014991: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012

KB5014991: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012 Summary This update includes improvements for the following issue: Addresses a known issue that might cause authentication failures for some services on a server o...

KB5014990: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2008 SP2

KB5014990: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2008 SP2 Summary This update includes improvements for the following issue: Addresses a known issue that might cause authentication failures for some services on a serv...

May 19, 2022—KB5015019 (OS Build 14393.5127) Out-of-band

None None...

May 19, 2022—KB5015013 (OS Build 20348.709) Out-of-band

None None...

Apache Tomcat DoS

The vulnerability of the Apache Tomcat application server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures using a specially crafted package...

ClamAV Cisco AMP DoS

The vulnerability of the ClamAV antivirus software library and the Cisco AMP security tool for end devices is related to the handling of an unreliable pointer. Exploiting this vulnerability can allow a attacker to cause service failures...

ClamAV Cisco AMP DoS

The vulnerability of the ClamAV antivirus software library and the Cisco AMP security tool for end devices is related to memory release errors during HTML file syntax analysis. Exploiting this vulnerability can allow an attacker to cause service interruptions...

GHSA-WF9G-RH76-6JVR Incorrect Permission Assignment for Critical Resource in Jenkins

In Jenkins before versions 2.44, 2.32.2 low privilege users were able to override JDK download credentials SECURITY-392, resulting in future builds possibly failing to download a JDK...

CISA Temporarily Removes CVE-2022-26925 from Known Exploited Vulnerability Catalog

CISA is temporarily removing CVE-2022-26925 from its Known Exploited Vulnerability Catalog due to a risk of authentication failures when the May 10, 2022 Microsoft rollup update is applied to domain controllers. After installing May 10, 2022 rollup update on domain controllers, organizations migh...

Cisco Firepower Threat Defense DoS

The vulnerability of the malware analysis process in Cisco Firepower Threat Defense software is related to insufficient resource control during its operation. Exploiting this vulnerability allows a remote attacker to cause service failures...

May 10, 2022—KB5014001 (Security-only update)

None None...

May 10, 2022—KB5014011 (Monthly Rollup)

None None...

May 10, 2022—KB5014018 (Security-only update)

None None...

May 10, 2022—KB5014017 (Monthly Rollup)

None None...

MySQL Server Data Compromise

Vulnerability of the MySQL Server component: The MySQL Server database management system has vulnerabilities due to insufficient validation of input data. Exploiting these vulnerabilities allows an attacker to compromise the integrity of protected information or cause service failures...

Bludit 跨站脚本漏洞

Bludit CMS is an open source lightweight blog content management system CMS. v3.13.1 of Bludit CMS contains a cross-site scripting vulnerability that originates from the lack of filtering and validation of user input data on the /admin/new-content page. An attacker could use this vulnerability to...

PowerScale OneFS Resource Leak DoS

The vulnerability of the PowerScale OneFS operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Solaris kernel DoS

The vulnerability of the Solaris operating system’s kernel exists due to insufficient checks on input data. Exploiting this vulnerability can allow an attacker to cause service failures...

Solaris kernel DoS

The vulnerability of the Solaris operating system’s kernel exists due to insufficient checks on input data. Exploiting this vulnerability can allow an attacker to cause service failures...