CVE-2021-36369

An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change the login process in its favor. This attack can bypass additional security measures such as FIDO2...

CVE-2022-38032

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability...

CVE-2022-37978

Windows Active Directory Certificate Services Security Feature Bypass...

CVE-2022-37978

Windows Active Directory Certificate Services Security Feature Bypass...

CVE-2022-37978

Windows Active Directory Certificate Services Security Feature Bypass...

CVE-2022-38032

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability...

Security Bulletin: Multiple Vulnerabilities in Rational Change 5.3.2 Fix Pack 04 and earlier versions.

Summary Vulnerabilities in the Jetty 9.4.42 and earlier component shipped with Rational Change may affect the security of the product. Vulnerability Details CVEID:CVE-2022-2191 DESCRIPTION: Eclipse Jetty is vulnerable to a denial of service, caused by a flaw with SslConnection does not release...

CVE-2022-38032 Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

...

PT-2022-5753 · Microsoft · Windows Active Directory Certificate Services +1

Name of the Vulnerable Software and Affected Versions: Windows Active Directory Certificate Services affected versions not specified Description: The issue is related to insufficient access restrictions in the Active Directory Certificate Services component of Windows operating systems. It allows...

KLA20006 RCE vulnerability in LibreOffice

Remote code execution vulnerability was found in LibreOffice. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Macro URL arbitrary script execution Related products LibreOffice CVE list CVE-2022-3140 high Solution Update to the latest version Download...

KLA20033 SB vulnerability in Apache Tomcat

Security vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories Apache Tomcat 8.x vulnerabilities Apache Tomcat 10.1.x vulnerabilities Related products Apache-Tomcat CVE list CVE-2022-42252 critical Solution...

Kubernetes: Ingress nginx annotation injection causes arbitrary command execution

A vulnerability was found where arbitrary commands could be executed on the Kubernetes cluster. Through annotation injection on the ingress resource, additional locations could be added to the nginx configuration, allowing commands to be passed and executed via the lua scripting engine on the...

KLA20034 SB vulnerability in Apache Tomcat

Security vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories Apache Tomcat 10.0.x vulnerabilities Related products Apache-Tomcat CVE list CVE-2022-42252 critical Solution Update to the latest version Tomcat...

The vulnerability of the pam_access.so function in the Linux-PAM authentication module allows a hacker to circumvent existing security restrictions.

The vulnerability of the pamaccess.so module of the Linux-PAM authentication module is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

KLA20032 SB vulnerability in Apache Tomcat

Security vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories Apache Tomcat 9.x vulnerabilities Related products Apache-Tomcat CVE list CVE-2022-42252 critical Solution Update to the latest version Tomcat 9.0...

Security Bulletin: IBM MaaS360 Cloud Extender Agent and Base Module use libcurl with multiple known vulnerabilities

Summary Vulnerabilities contained within libcurl a 3rd party component were identified and remediated in the IBM MaaS360 Cloud Extender Agent and Base Module. Vulnerability Details CVEID:CVE-2022-27780 DESCRIPTION: cURL libcurl could allow a remote attacker to bypass security restrictions, caused...

PT-2022-5128 · Cisco · Cisco Secure Web Appliance +1

Name of the Vulnerable Software and Affected Versions: Cisco Secure Web Appliance versions affected versions not specified Description: The issue is related to insufficient input validation in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance. This could allow a remote...

KLA20106 ACE vulnerability in Cisco Jabber

XMPP message smuggling vulnerability was found in Cisco Jabber. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Cisco Jabber Client Software Extensible Messaging and Presence Protocol Stanza Smuggling Vulnerability Related products Cisco-Jabber CVE li...

Security Bulletin: Multiple Vulnerabilities in Cloud Pak for Watson AIOPs

Summary 3.5 Fixes the following vulnerabilities: CVE-2022-1154, CVE-2018-25032, CVE-2020-29582, CVE-2022-24329, CVE-2022-29217, CVE-2022-22476, CVE-2022-1271, CVE-2022-0778 Vulnerability Details CVEID:CVE-2022-1154 DESCRIPTION: Vim is vulnerable to a heap-based buffer overflow, caused by a...

KLA19265 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Out of bounds write vulnerability in V8 can be exploited to cause denial of service. 2. Use...