17626 matches found
Security Bulletin: IBM InfoSphere Information Server is vulnerable to denial of service and arbitrary code execution due to Apache Log4j (CVE-2021-45105, CVE-2021-45046)
Summary There are multiple Apache Log4j CVE-2021-45105, CVE-2021-45046 vulnerabilities impacting IBM InfoSphere Information Server which uses Apache Log4j for logging. The fix upgrades Apache Log4j to version 2.17.0. Vulnerability Details CVEID:CVE-2021-45105 DESCRIPTION: Apache Log4j is vulnerab...
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: I’m speaking at the World Ethical Data Forum, online, October 26-28, 2022. I’m speaking at the 24th International Information Security Conference in Madrid, Spain, on November 17, 2022. The list is maintained on this page...
CVE-2022-41674
creationtimestamp| type| source ---|---|--- 2022-10-14 07:28:20+00:00| seen| https://t.me/cibsecurity/51389 2025-05-15 14:35:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16509 2026-07-26 02:02:37+00:00| seen| https://t.me/EchelonEyes/781 2026-07-27 00:01:14+00:00| seen|...
CVE-2022-41597
CVE-2022-41597 affects Huawei HarmonyOS devices, specifically the fingerprint trusted application (TA) running on phones. The issue involves heap overflow, out-of-bounds read, and null pointer vulnerabilities in the TA, with successful exploitation potentially impacting the fingerprint service. T...
SAP BusinessObjects BI LaunchPad Code Execution Vulnerability
SAP BusinessObjects BI LaunchPad is a standard Web portal for users of the SAP BusinessObjects Business Intelligence BI platform from SAP. A code execution vulnerability exists in SAP BusinessObjects BI LaunchPad versions 420 and 430, which stems from failure to properly clean up user input when...
CVE-2022-2828
CVE-2022-2828 describes an Insecure Direct Object Reference (IDOR) vulnerability in Octopus Server that can reveal information about teams via the API. The available documents confirm the issue and its root cause but do not specify affected versions, exploitable conditions, or a remediation. The ...
Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability
Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows unified access to data from a variety of sources.A remote code execution vulnerability exists in Microsoft OLE DB Provider for SQL Server, which stems from An attacker can exploit the vulnerability to cause...
CVE-2018-18446
Paint.NET (dotPDN) before version 4.1.2 is affected by CVE-2018-18446 due to Deserialization of Untrusted Data. The issue affects Paint.NET software prior to 4.1.2; the root cause is not detailed beyond the deserialization flaw. The CVSS metrics indicate a CRITICAL impact across confidentiality, ...
The vulnerability of the REST API interface of the software platform for implementing the hypertext environment of MediaWiki allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the REST API interface of the software platform for implementing the hypertext environment of MediaWiki is related to the disclosure of information. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected...
CVE-2021-36201
CVE-2021-36201 affects Johnson Controls/Sensormatic C-CURE 9000. The vulnerability, labeled Observable Response Discrepancy, occurs in CCURE 9000 versions prior to 2.90 and could allow an unauthorized CCURE Portal user to enumerate existing user accounts due to problematic responses. CVSS base me...
CVE-2022-38388
Affected product: IBM Navigator Mobile Android (versions 3.4.1.1–3.4.1.2). Root cause: Improper access control leading to potential information disclosure by a local user. Impact (as stated): Local user could obtain sensitive information; CVSS base score 4.0–5.5 depending on source, with confiden...
CVE-2022-33746
CVE-2022-33746 is a Xen hypervisor issue where the P2M pool backing second-level address translation for guests can become very large, causing freeing to take longer than expected due to lack of preemption checks. The vulnerability is discussed in multiple connected advisories across distribution...
CVE-2022-42043
The CVE-2022-42043 entry concerns the Python d8s-xml package (PyPI) version 0.1.0, where a third-party backdoor named democritus-html has been inserted, enabling potential code execution. The connected documents confirm the affected component and root cause but do not provide a concrete patch ver...
CVE-2022-40181
CVE-2022-40181 affects Siemens Desigo PXM devices (PXM30-1, PXM30.E, PXM40-1, PXM40.E, PXM50-1, PXM50.E, PXG3.W100-1, PXG3.W100-2, PXG3.W200-1, PXG3.W200-2). The embedded browser fails to neutralize encoded URI schemes when redirected to resources by web app code, enabling a remote, low-privilege...
CVE-2022-39015
CVE-2022-39015 affects SAP BusinessObjects Business Intelligence Platform via BOE AdminTools/BOE SDK. Under certain conditions, an attacker can access information that should be restricted (validated by NVD entry and related Red Hat/CNVD entries). CVSSv3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, ba...
GHSA-4MJX-2GH5-PH8H Exposure of sensitive Slack webhook URLs in debug logs and traces
Impact Debug logs expose sensitive URLs for Slack webhooks that contain private information. Patches The problem is fixed in v1.3.2 which redacts sensitive URLs for webhooks. Workarounds Disabling/filtering debug logs in case you use Slack webhooks using tracing log level and filters. References...
CVE-2022-42724
app/Controller/UsersController.php in MISP before 2.4.164 allows attackers to discover role names this is information that only the site admin should have...
Threat Roundup for September 30 to October 7
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between Sept. 30 and Oct. 7. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral characteristics...
NSA Alert: Topmost CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors
On October 6, 2022, the United States National Security Agency NSA released a cybersecurity advisory on the Chinese government—officially known as the People’s Republic of China PRC states-sponsored cyber actors activity to seek national interests. These malicious cyber activities attributed to t...
