7250 matches found
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a data binding rules security weakness in Spring Framework (CVE-2022-22968)
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a Spring framework data binding rules vulnerability, where case sensitive patterns for disallowedFields cause weaker than expected security CVE-2022-22968. Spring Framework is used by some of the java...
selinux-policy bug fix and enhancement update
An update is available for selinux-policy. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The selinux-policy packages contain the rules that govern how confined...
A Bootiful Podcast: Mario Fusco, the Drools rules engine project lead and fellow Java Champion
Hi, Spring fans! In this episode I talk to Drools lead Mario Fusco @mariofusco about the rules engine Drools and its integrations with Spring, Olivetti computers, and so much more...
A Bootiful Podcast: Mario Fusco, the Drools rules engine project lead and fellow Java Champion
Hi, Spring fans! In this episode I talk to Drools lead Mario Fusco @mariofusco about the rules engine Drools and its integrations with Spring, Olivetti computers, and so much more...
Microsoft Patch Tuesday for January 2023 — Snort rules and prominent vulnerabilities
Microsoft released its monthly security update on Tuesday, disclosing 98 vulnerabilities. Of these vulnerabilities, 11 are classified as "Critical", 87 are classified as "Important", no vulnerability classified as "Moderate." According to Microsoft all "Critical" vulnerability are either less...
Vulnerability Spotlight: Asus router access, information disclosure, denial of service vulnerabilities discovered
Lilith of Cisco Talos discovered these vulnerabilities. Cisco Talos recently discovered three vulnerabilities in Asus router software. The Asus RT-AX82U router is one of the newer Wi-Fi 6 802.11ax-enabled routers that also supports mesh networking with other Asus routers. Like other routers, it i...
Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to security bypass due to Spring Security (CVE-2022-31692)
Summary IBM Sterling Partner Engagement Manager has addressed a vulnerablity in Spring Security. Vulnerability Details CVEID:CVE-2022-31692 DESCRIPTION: VMware Tanzu Spring Security could allow a remote attacker to bypass security restrictions, caused by a flaw when using forward or include...
AAWP < 3.12.3 - Unsafe URL Handling
The plugin can be used to abuse trusted domains to load malware or other files through it Reflected File Download to bypass firewall rules in companies. PoC wp-content/aawp/public/image.php?url=base64-url will load and download the file from the base64-decoded URL...
Why does technology no longer excite us? Lock and Code S04E01
When did technology last excite you? If Douglas Adams, author of The Hitchhiker's Guide to the Galaxy, is to be believed, your own excitement ended, simply had to end, after turning 35 years old. Decades ago, at first writing privately and later having those private writings published after his...
SUSE-SU-2023:0011-1 Security update for saphanabootstrap-formula
This update for saphanabootstrap-formula fixes the following issues: - Version bump 0.13.1 revert changes to spec file to re-enable SLES RPM builds CVE-2022-45153: Fixed privilege escalation for arbitrary users in hana/hacluster.sls bsc1205990 - Version bump 0.13.0 pass sid to sudoers in a SLES12...
CVE-2022-43830
To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...
CVE-2022-43828
To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...
CVE-2022-43826
To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...
CVE-2022-43825
To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...
CVE-2022-43824
To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...
CVE-2022-43823
To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...
CVE-2022-43829
To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...
CVE-2022-43827
To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...
