Vulnerability of the Server component: Security: Privileges of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server component, specifically the Security: Privileges section of the Oracle MySQL Server database management system, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL...

Vulnerability of the Shell component: Core/Client system of the Oracle Database Management System, MySQL Server, which allows a hacker to cause a service failure.

Shell component vulnerability: The Core/Client part of the Oracle MySQL Server database management system is vulnerable due to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions...

Vulnerability of the Server component: The Replication function of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server database management system’s replication component is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions using the MySQL protocol...

Vulnerabilities fixed in Google Android and Samsung Mobile

Google has fixed vulnerabilities in Android. Also fixed vulnerabilities in closed-source parts of Android that are developed by third parties, such as Qualcomm, Arm, Imagination Technologies, Unisoc and Widevine. The vulnerabilities potentially enable a malicious person to execute attacks that...

The vulnerability of the IBM QRadar WinCollect Agent’s event forwarding mechanism, related to access control deficiencies, allows attackers to increase their privileges.

The vulnerability of the event forwarding mechanism in IBM QRadar WinCollect Agent is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Cisco Aironet Access Point microprogramming software and Cisco Wireless LAN Controller (WLC) microprogramming software, related to access control deficiencies, allows attackers to circumvent security restrictions.

The vulnerability of Cisco Aironet Access Point microprogramming software and Cisco Wireless LAN Controller WLC microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint (CE) device, related to deficiencies in access control to the version-controlled repository, allows a perpetrator to gain read, modify, or delete access to data.

The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint device is related to deficiencies in access control to the version-controlled repository. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to data...

Apple's iOS 16.5 Fixes 3 Security Bugs Already Used in Attacks

Plus: Microsoft patches two zero-day flaws, Google’s Android and Chrome get some much-needed updates, and more...

The vulnerability of the microprogramming software for FS S3900-24T4S devices, due to deficiencies in access control, allows attackers to escalate their privileges and bypass the administrator password.

The vulnerability of the microprogramming software for FS S3900-24T4S switches is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges and bypass the administrator password...

The vulnerability of the MultiReport component of the Cybozu Garoon data exchange platform allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the MultiReport component of the Cybozu Garoon data exchange platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity of the protected information...

Security Bulletin: QRadar Pulse application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM has released a new version which addresses the vulnerabilities. Vulnerability Details CVEID:CVE-2022-25881 DESCRIPTION: Node.js http-cache-semantics module i...

USN-6118-1 linux-oracle, linux-oracle-5.4 vulnerabilities

Zheng Wang discovered that the Intel i915 graphics driver in the Linux kernel did not properly handle certain error conditions, leading to a double-free. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3707 Jordy Zomer and Alexandra Sandulescu discover...

Hackers Win $105,000 for Reporting Critical Security Flaws in Sonos One Speakers

Multiple security flaws uncovered in Sonos One wireless speakers could be potentially exploited to achieve information disclosure and remote code execution, the Zero Day Initiative ZDI said in a report published last week. The vulnerabilities were demonstrated by three different teams from Qrious...

Hackers Win $105,000 for Reporting Critical Security Flaws in Sonos One Speakers

Multiple security flaws uncovered in Sonos One wireless speakers could be potentially exploited to achieve information disclosure and remote code execution, the Zero Day Initiative ZDI said in a report published last week. The vulnerabilities were demonstrated by three different teams from Qrious...

The vulnerability of the built-in software of the ARIS controller is related to deficiencies in the authentication process, allowing a perpetrator to execute arbitrary code.

The vulnerability of the built-in software of the ARIS controller is related to deficiencies in the authentication process, allowing a perpetrator to execute arbitrary code using a specially crafted request...

The vulnerability of the kernel of MacOS systems, which allows attackers to disclose sensitive information

The vulnerability of the kernel of MacOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of Trend Micro Apex One and Apex One as a Service, web-based antivirus software consoles, allows attackers to gain unauthorized access to protected information.

The vulnerability of Trend Micro Apex One and Apex One as a Service web antivirus software programs is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by connecting to port 434...

Predator Android Spyware: Researchers Uncover New Data Theft Capabilities

Security researchers have detailed the inner workings of the commercial Android spyware called Predator, which is marketed by the Israeli company Intellexapreviously Cytrox. Predator was first documented by Google's Threat Analysis Group TAG in May 2022 as part of attacks leveraging five differen...

The vulnerabilities of the ObjectManager plugin and ProfileInformation.ProfileData components of the PLACODESYS Development System application programming interface allow attackers to execute arbitrary commands.

The vulnerability of the ObjectManager plugin and ProfileInformation.FileData components of the PLCODESYS Development System application programming interface is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to execute arbitrary...

AlmaLinux 8 : container-tools:rhel8 (ALSA-2023:2758)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:2758 advisory. golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1705 golang: go/parser: stack exhaustion in all Parse functions CVE-2022-1962...