PT-2022-30059

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue concerns the decoding of NV12M jpegs into single-planar buffers in the media: imx-jpeg component. The actual impact and attack plausibility have not yet been proven. Recommendations...

RHEL 7 : Red Hat Single Sign-On 7.5.2 security update on RHEL 7 (Low) (RHSA-2022:1462)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:1462 advisory. Red Hat Single Sign-On 7.5 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on...

RHEL 8 : Red Hat Single Sign-On 7.5.2 security update on RHEL 8 (Low) (RHSA-2022:1463)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:1463 advisory. Red Hat Single Sign-On 7.5 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on...

CVE-2022-29533

An issue was discovered in MISP before 2.4.158. There is XSS in app/Controller/OrganisationsController.php in a situation with a "weird single checkbox page."...

Low: Red Hat Security Advisory: Red Hat Single Sign-On 7.5.2 security update on RHEL 8

New Red Hat Single Sign-On 7.5.2 packages are now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Low: Red Hat Security Advisory: Red Hat Single Sign-On 7.5.2 security update on RHEL 7

New Red Hat Single Sign-On 7.5.2 packages are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Low: Red Hat Security Advisory: Red Hat Single Sign-On 7.5.2 security update

A security update is now available for Red Hat Single Sign-On 7.5 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

STB security vulnerabilities

stb is a single-file public domain library for C/C ++. A security vulnerability exists in stb version v2.27, which stems from the inclusion of an integer shift of invalid size in the component stbijpegdecodeblockprogac...

CVE-2022-27570

Heap-based buffer overflow vulnerability in parsersingleiref function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker...

CVE-2022-27570

Heap-based buffer overflow vulnerability in parsersingleiref function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker...

Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by IBM WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On due to Expat vulnerabilities

Summary There are multiple vulnerabilities in the Expat library affecting the IBM HTTP Server used by IBM WebSphere Application Server CVE-2022-25313, CVE-2022-25315, CVE-2022-25235,CVE-2022-25236, CVE-2021-45960, CVE-2022-22822, CVE-2022-23990, CVE-2022-22823, CVE-2022-23852, CVE-2022-22825,...

PT-2022-18491

Name of the Vulnerable Software and Affected Versions libsimba library versions prior to SMR Apr-2022 Release 1 Description The issue is a heap-based buffer overflow vulnerability in the parser single iref function. This allows a remote attacker to execute code. Recommendations For versions prior...

Kronos Single Connect授权错误漏洞

Kronos Single Connect is a comprehensive privileged access management Pam software suite from Kronos Turkey. Designed to create a flexible, centrally managed and layered defense security architecture against insider threats, Kronos Single Connect has an authorization error vulnerability that coul...

Design/Logic Flaw

When creating or updating credentials for single-user access, Apache NiFi wrote a copy of the Login Identity Providers configuration to the operating system temporary directory. On most platforms, the operating system temporary directory has global read permissions. NiFi immediately moved the...

WordPress Event Single Page Templates Addon For The Events Calendar plugin <= 1.5 - Arbitrary Plugin Activation vulnerability

Arbitrary Plugin Activation vulnerability discovered by Jerome Bruandet NinTechNet in WordPress Event Single Page Templates Addon For The Events Calendar plugin versions = 1.5. Solution Update the WordPress Event Single Page Templates Addon For The Events Calendar plugin to the latest available...

PT-2022-18100

Name of the Vulnerable Software and Affected Versions Apache NiFi versions prior to 1.16.0 Description The issue arises when creating or updating credentials for single-user access in Apache NiFi. NiFi writes a copy of the Login Identity Providers configuration to the operating system temporary...

Security Bulletin: IBM WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On is vulnerable to remote code execution due to Dojo (CVE-2021-23450)

Summary IBM WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On is vulnerable to remote code execution due to Dojo CVE-2021-23450. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security...

PT-2022-10373

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Red Hat Single Sign-On affected versions not specified Description A flaw was found in Keycloak where it may fail to logout a user session if the logout request comes from an external SAML identity...

Belarusian ‘Ghostwriter’ Actor Picks Up BitB for Ukraine-Related Attacks

Ghostwriter – a threat actor previously linked with the Belarusian Ministry of Defense – has glommed onto the recently disclosed, nearly invisible “Browser-in-the-Browser” BitB credential-phishing technique in order to continue its ongoing exploitation of the war in Ukraine. In a Wednesday post,...

expat: Integer overflow in doProlog in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...