PT-2022-34765 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.12 Description: The issue arises when the function to allocate a gendisk fails, but the code still attempts to call blk put queue. This could potentially lead to security vulnerabilities, although the actu...

PT-2022-34842 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.146 Description: The issue is related to the taprio component in the Linux Kernel, where offload can be disabled even if it was never enabled. The actual impact and attack plausibility have not yet been...

PT-2022-34756 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: A use-after-free issue has been identified. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.7 and is fixed in Linux Kernel version...

MGASA-2022-0360 Updated enlightenment packages fix security vulnerability

Updated enlightenment package to fix the security vulnerability, CVE-2022-37706 that would allow an user to gain root privileges...

CVE-2022-40684: Remote Authentication Bypass Vulnerability in Fortinet Firewalls, Web Proxies

Emergent threats evolve quickly, and as we learn more about this vulnerability, this blog post will evolve, too. On October 3, 2022, Fortinet released a software update that indicates then-current versions of their FortiOS firewall and FortiProxy web proxy software are vulnerable to CVE-2022-4068...

Vulnerability Spotlight: Issue in Hancom Office 2020 could lead to code execution

Marcin “Icewall” Noga of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered an exploitable memory corruption vulnerability in Hancom Office 2020. Hancom Office is a popular software collection among South Korean users that offers similar products to...

SUSE-SU-2022:3550-1 Security update for xmlgraphics-commons

This update for xmlgraphics-commons fixes the following issues: - Update to version 2.6 - CVE-2020-11988: Fixed a server-side request forgery caused by improper input validation by the XMPParser. bsc281607...

PT-2022-25038 · Samsung · Knox Vpn Policy

Name of the Vulnerable Software and Affected Versions: knox vpn policy versions prior to SMR Oct-2022 Release 1 Description: The issue is related to improper access control in the knox vpn policy service, which allows unauthorized read access to configuration data. Recommendations: For versions...

PT-2022-23672 · Unknown · Mousenkeyhiddevice

Name of the Vulnerable Software and Affected Versions: MouseNKeyHidDevice versions prior to SMR Oct-2022 Release 1 Description: The issue is related to the improper restriction of broadcasting Intent in MouseNKeyHidDevice, which leaks the MAC address of the connected Bluetooth device...

PT-2022-25037 · Unknown · At Distributor

Name of the Vulnerable Software and Affected Versions: AT Distributor versions prior to SMR Oct-2022 Release 1 Description: The issue allows a local attacker to access sensitive information, specifically the SerialNo, via log exposure. Recommendations: For versions prior to SMR Oct-2022 Release 1...

SUSE-SU-2022:3531-1 Security update for squid

This update for squid fixes the following issues: Updated squid to version 5.7: - CVE-2022-41317: Fixed exposure of sensitive information in cache manager bsc1203677. - CVE-2022-41318: Fixed buffer overread in SSPI and SMB Authentication bsc1203680...

DSA-5250-1 dbus - security update

Bulletin has no description...

Impacket and Exfiltration Tool Used to Steal Sensitive Information from Defense Industrial Base Organization

Summary Actions to Help Protect Against APT Cyber Activity: • Enforce multifactor authentication MFA on all user accounts. • Implement network segmentation to separate network segments based on role and functionality. • Update software, including operating systems, applications, and firmware, on...

PT-2022-6639 · Cisco · Cisco Telepresence Collaboration Endpoint

Name of the Vulnerable Software and Affected Versions: Cisco TelePresence Collaboration Endpoint CE versions affected versions not specified Description: The issue is related to insufficient access control to the version control repository of the Cisco TelePresence Collaboration Endpoint CE...

PT-2022-5101 · Cisco · Cisco Expressway Series +1

Name of the Vulnerable Software and Affected Versions: Cisco Expressway Series and Cisco TelePresence VCS affected versions not specified Description: The issue is related to a cross-site request forgery CSRF attack. It is caused by insufficient CSRF protections for the web-based management...

PT-2022-21890 · Autodesk · Autocad +1

Name of the Vulnerable Software and Affected Versions: Autodesk Design Review version 2018 AutoCAD versions 2022 through 2023 Description: A maliciously crafted GIF or JPEG file can be used to write beyond the allocated heap buffer when parsed through the affected software, potentially leading to...

PT-2022-18997 · Unknown · Zephyr Project Manager

Name of the Vulnerable Software and Affected Versions: Zephyr Project Manager versions prior to 3.2.55 Description: The issue concerns a lack of authorization and CSRF protection in all AJAX actions of the plugin, allowing unauthenticated users to call these actions directly or through CSRF...

PT-2022-26359 · Veritas · Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions prior to 10.0 Veritas related products affected versions not specified Description: A SQL Injection attack issue was discovered, affecting the idm, nbars, and SLP manager code of the NetBackup Primary server...

PT-2022-34671 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.143 Description: A use-after-free issue was discovered in the efi capsule write function of the EFI capsule loader. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-34640 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.68 Description: A memory leak issue was discovered when using the debugfs lookup function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...