Vulnerabilities fixed in SAP products

Vulnerabilities have been fixed in several SAP products. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Bypassing authentication Bypassing security measure SQL...

Microsoft Windows Multiple Vulnerabilities (KB5015807)

This host is missing an important security update according to Microsoft KB5015807 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

The vulnerability of the microprogrammed Ethernet switch Bosch PRA-ES8P2S, related to deficiencies in access control, allows attackers to bypass existing security restrictions and elevate their privileges to the root level.

The vulnerability of the microprogrammed Ethernet switch Bosch PRA-ES8P2S is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and elevate their privileges to the root level...

Microsoft Windows Multiple Vulnerabilities (KB5015811)

This host is missing an important security update according to Microsoft KB5015811 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jul 2022)

This host is missing a critical security update according to Microsoft Office Click-to-Run update SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

CVE-2022-33632

Microsoft Office Security Feature Bypass Vulnerability...

CVE-2022-22023

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability...

Security feature bypass

BitLocker Security Feature Bypass Vulnerability...

Security feature bypass

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability...

CVE-2022-33632 Microsoft Office Security Feature Bypass Vulnerability

...

CVE-2022-22048 BitLocker Security Feature Bypass Vulnerability

...

CVE-2022-22023 Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

...

Security Bulletin: Multiple vulnerabilities in the Golang language affect IBM Event Streams

Summary This security vulnerability affects Golang that is used by the IBM Event Streams CLI component Vulnerability Details CVEID: CVE-2021-44716 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by an uncontrolled memory consumption in the header canonicalization cache in...

PT-2022-3722 · Microsoft · Windows Portable Device Enumerator Service +1

Name of the Vulnerable Software and Affected Versions: Windows Portable Device Enumerator Service affected versions not specified Description: The issue is related to a security feature bypass in the Windows Portable Device Enumerator Service, which is caused by inadequate access control. This ca...

Vulnerabilities fixed in Microsoft Office, Skype and Lync

Microsoft has fixed vulnerabilities in Microsoft Office, Skype and Lync. A malicious party could potentially exploit the vulnerabilities to bypass a security measure or execute arbitrary code. Skype for Business and Microsoft Lync: |----------------|------|-------------------------------------| |...

PT-2022-3793 · Microsoft · Xbox Live Save Service +1

Name of the Vulnerable Software and Affected Versions: Xbox Live Save Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Xbox Live Save Service, which can be exploited to bypass system security restrictions and elevate privileges...

KB5015832: Windows 10 LTS 1507 Security Update (July 2022)

The remote Windows host is missing security update 5015832. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-22024, CVE-2022-22027,...

KLA12584 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Skype for Business and Lync can be exploited...

KLA12581 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, obtain sensitive information, execute arbitrary code, cause denial of service. Below is a complete list of...

Experts Uncover 350 Browser Extension Variants Used in ABCsoup Adware Campaign

A malicious browser extension with 350 variants is masquerading as a Google Translate add-on as part of an adware campaign targeting Russian users of Google Chrome, Opera, and Mozilla Firefox browsers. Mobile security firm Zimperium dubbed the malware family ABCsoup, stating the "extensions are...