17638 matches found
2022 Threat Predictions
Trellix 2022 Threat Predictions By Trellix · January 19, 2022 Ransomware, nation states, social media, and a shifting reliance on a remote workforce made headlines in 2021, proving that bad actors only continue to rise to the challenge. Defiantly, they thwart solution stacks and gain momentum eac...
CVE-2022-23221
H2Database/H2 Console, affected version before 2.1.210, is vulnerable to remote code execution via a crafted JDBC URL in the H2 Console. The vulnerability is triggered by a substring in the URL jdbc:h2:mem with IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT, enabling arbitrary ...
CVE-2022-21700 Memory leak in micronaut-core
Micronaut is a JVM-based, full stack Java framework designed for building JVM web applications with support for Java, Kotlin and the Groovy language. In affected versions sending an invalid Content Type header leads to memory leak in DefaultArgumentConversionContext as this type is erroneously us...
CVE-2022-22530
CVE-2022-22530 affects the SAP S/4HANA F0743 Create Single Payment application (versions 100–106). The issue is improper validation of uploaded/downloaded files, enabling a user with basic rights to inject dangerous content or malicious code, potentially modifying critical information and comprom...
CVE-2021-45067
Summary: CVE-2021-45067 affects Adobe Acrobat Reader DC and older builds (21.007.20099 and earlier; 20.004.30017 and earlier; 17.011.30204 and earlier) with an Access of Memory Location After End of Buffer that could disclose memory contents and potentially bypass ASLR. Exploitation requires user...
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: I’m giving an online-only talk on “Securing a World of Physically Capable Computers” as part of Teleport’s Security Visionaries 2022 series, on January 18, 2022. I’m speaking at IT-S Now 2022 in Vienna on June 2, 2022. I’m speaking...
CVE-2020-13748
CVE-2020-13748 entry is rejected/not used per the description.