17637 matches found
CVE-2021-22644
CVE-2021-22644 is part of a set of vulnerabilities in Ovarro TBox/TWinSoft. The TWinSoft software uses a custom hardcoded user “TWinSoft” with a hardcoded key, enabling attackers to extract the hardcoded cryptographic key (CVE-2021-22644) and, with other flaws (CVE-2021-22646, CVE-2021-22648, CVE...
CVE-2022-27614
CVE-2022-27614 is an information-disclosure vulnerability in Synology Media Server prior to 1.8.1-2876. The issue allows remote attackers to obtain sensitive information via unspecified vectors due to exposure of data to unauthorized actors. Affected product/component: Synology Media Server (web ...
Design/Logic Flaw
Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from a user's local files via a crafted HTML page...
CVE-2022-36994
The CVE-2022-36994 issue affects Veritas NetBackup versions 8.1.x–8.1.2, 8.2, 8.3.x–8.3.0.2, 9.x–9.0.0.1, and 9.1.x–9.1.0.1. Description: An attacker with authenticated access to a NetBackup Client could arbitrarily read files from a NetBackup Primary server. Root cause: improper access control a...
CVE-2022-2160
The CVE-2022-2160 entry concerns Insufficient policy enforcement in DevTools for Google Chrome on Windows before 103.0.5060.53. A malicious extension installed by a user could allow access to potentially sensitive data from local files via a crafted HTML page. Connected documents corroborate the ...
Diactoros before 2.11.1 vulnerable to HTTP Host Header Attack
Impact Applications that use Diactoros, and are either not behind a proxy, or can be accessed via untrusted proxies, can potentially have the host, protocol, and/or port of a Laminas\Diactoros\Uri instance associated with the incoming server request modified to reflect values from X-Forwarded-...
CVE-2022-1501
CVE-2022-1501 refers to an issue in Google Chrome/Chromium where an inappropriate implementation in iframe could leak cross-origin data via a crafted HTML page. Affected product: Chromium/Chrome prior to version 101.0.4951.41. Root cause: iframe handling leading to cross-origin data exposure. Imp...
CVE-2021-33459
CVE-2021-33459 concerns yasm 1.3.0, with a NULL pointer dereference in nasm_parser_directive() (modules/parsers/nasm/nasm-parse.c). Vulnerable component: yasm (nasM parsing code). Impact per NVD metrics: CVSSv3.1 base score 5.5 (Medium); attack vector: Local; permissions required: None; user inte...
Hospital Information System 1.0 SQL Injection Exploit
Exploit Title: Hospital Information System - SQL Injection via login page Exploit Author: saitamang Vendor Homepage: https://code-projects.org Software Link: https://download-media.code-projects.org/2019/11/HOSPITALINFORMATIONSYSTEMINPHPWITHSOURCECODE.zip Version: 1.0 Tested on: Centos 7 apache2 ...
CVE-2022-33745
The CVE-2022-33745 issue is in the Xen hypervisor affecting x86 paravirtualized guests. The root cause is an incorrect TLB flush condition after code movement inside Xen, causing some necessary TLB flushes to be omitted when running PV guests in shadow paging mode (to support migrations and L1TF ...
CVE-2022-23000 Weak Default SSL use in Port Forwarding Service
The Western Digital My Cloud Web App https://os5.mycloud.com/ uses a weak SSLContext when attempting to configure port forwarding rules. This was enabled to maintain compatibility with old or outdated home routers. By using an "SSL" context instead of "TLS" or specifying stronger validation,...
CVE-2022-23000
CVE-2022-23000 affects Western Digital My Cloud Web App (os5.mycloud.com). The issue is a weak SSLContext used when configuring port forwarding rules, due to using an "SSL" context instead of TLS or stronger validation. Root cause: deprecated/insecure protocol support is retained to maintain comp...
ISO 27002 Emphasizes Need For Threat Intelligence
With employees reluctant to return to the office following the COVID-19 pandemic, the concept of a well-defined network perimeter has become a thing of the past for many organizations. Attack surfaces continue to expand, and as a result, threat intelligence has taken on even greater importance...
Discover 5 lessons Microsoft has learned about compliance management
Compliance management is a complex process—one that gets increasingly more complicated the larger an organization grows. Microsoft knows this firsthand, not only because of our experience providing Security and Compliance solutions to customers but also because of the global reach and...
Discover 5 lessons Microsoft has learned about compliance management
Compliance management is a complex process—one that gets increasingly more complicated the larger an organization grows. Microsoft knows this firsthand, not only because of our experience providing Security and Compliance solutions to customers but also because of the global reach and...
CVE-2022-35652
CVE-2022-35652 describes an open redirect in Moodle due to improper sanitization of user-supplied data in the mobile auto-login feature. The root cause is lack of proper input sanitization, allowing a remote attacker to craft a link that points to a trusted site but redirects victims to an arbitr...
CVE-2022-35651
CVE-2022-35651 describes a vulnerability in Moodle where insufficient sanitization of user-supplied data in SCORM track details enables a stored XSS and blind SSRF. A remote attacker can lure a user to follow a crafted link and execute arbitrary HTML/script in the context of the vulnerable site, ...
CVE-2022-2135 Advantech iView
The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose information...
Booked vulnerable to open redirect
Overview Booked provided by Twinkle Toes Software contains an open redirect vulnerability CWE-601. Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact When...