The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST controllers, related to deficiencies in the validation of user-input data, allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST distributed controllers is related to deficiencies in the validation of user-input data. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting XSS attacks remotely...

Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

Important: samba

Issue Overview: An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store. CVE-2018-14628 A user with sufficient...

Vulnerability of the Server component: The Oracle MySQL Server database management system’s DDL functions allow attackers to cause service interruptions.

Vulnerability of the Server component: The DDL system for managing databases in Oracle MySQL Server has vulnerabilities related to access control. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL protocol...

The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call control device and the Cisco RoomOS operating system, related to access control deficiencies, allows a intruder to gain access to confidential data.

The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call control device and the Cisco RoomOS operating system is related to reading data from buffers beyond the allowed limits. Exploiting this vulnerability allows a malicious actor to gai...

Vulnerability of the Server component: The Replication function of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server database management system’s replication component is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions using the MySQL protocol...

Vulnerability of the Server component: Security: Privileges of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server component, specifically the Security: Privileges section of the Oracle MySQL Server database management system, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL...

Vulnerability of the Shell component: Core/Client system of the Oracle Database Management System, MySQL Server, which allows a hacker to cause a service failure.

Shell component vulnerability: The Core/Client part of the Oracle MySQL Server database management system is vulnerable due to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions...

Vulnerabilities fixed in Google Android and Samsung Mobile

Google has fixed vulnerabilities in Android. Also fixed vulnerabilities in closed-source parts of Android that are developed by third parties, such as Qualcomm, Arm, Imagination Technologies, Unisoc and Widevine. The vulnerabilities potentially enable a malicious person to execute attacks that...

The vulnerability of the IBM QRadar WinCollect Agent’s event forwarding mechanism, related to access control deficiencies, allows attackers to increase their privileges.

The vulnerability of the event forwarding mechanism in IBM QRadar WinCollect Agent is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Cisco Aironet Access Point microprogramming software and Cisco Wireless LAN Controller (WLC) microprogramming software, related to access control deficiencies, allows attackers to circumvent security restrictions.

The vulnerability of Cisco Aironet Access Point microprogramming software and Cisco Wireless LAN Controller WLC microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint (CE) device, related to deficiencies in access control to the version-controlled repository, allows a perpetrator to gain read, modify, or delete access to data.

The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint device is related to deficiencies in access control to the version-controlled repository. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to data...

Apple's iOS 16.5 Fixes 3 Security Bugs Already Used in Attacks

Plus: Microsoft patches two zero-day flaws, Google’s Android and Chrome get some much-needed updates, and more...

The vulnerability of the microprogramming software for FS S3900-24T4S devices, due to deficiencies in access control, allows attackers to escalate their privileges and bypass the administrator password.

The vulnerability of the microprogramming software for FS S3900-24T4S switches is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges and bypass the administrator password...

The vulnerability of the MultiReport component of the Cybozu Garoon data exchange platform allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the MultiReport component of the Cybozu Garoon data exchange platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity of the protected information...

Security Bulletin: QRadar Pulse application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM has released a new version which addresses the vulnerabilities. Vulnerability Details CVEID:CVE-2022-25881 DESCRIPTION: Node.js http-cache-semantics module i...

USN-6118-1 linux-oracle, linux-oracle-5.4 vulnerabilities

Zheng Wang discovered that the Intel i915 graphics driver in the Linux kernel did not properly handle certain error conditions, leading to a double-free. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3707 Jordy Zomer and Alexandra Sandulescu discover...

Hackers Win $105,000 for Reporting Critical Security Flaws in Sonos One Speakers

Multiple security flaws uncovered in Sonos One wireless speakers could be potentially exploited to achieve information disclosure and remote code execution, the Zero Day Initiative ZDI said in a report published last week. The vulnerabilities were demonstrated by three different teams from Qrious...

Hackers Win $105,000 for Reporting Critical Security Flaws in Sonos One Speakers

Multiple security flaws uncovered in Sonos One wireless speakers could be potentially exploited to achieve information disclosure and remote code execution, the Zero Day Initiative ZDI said in a report published last week. The vulnerabilities were demonstrated by three different teams from Qrious...

The vulnerability of the built-in software of the ARIS controller is related to deficiencies in the authentication process, allowing a perpetrator to execute arbitrary code.

The vulnerability of the built-in software of the ARIS controller is related to deficiencies in the authentication process, allowing a perpetrator to execute arbitrary code using a specially crafted request...