CVE-2022-42175

creationtimestamp| type| source ---|---|--- 2023-07-05 07:19:54+00:00| seen| https://t.me/cibsecurity/65944...

Vulnerabilities fixed in Fortinet FortiNAC

Fortinet has fixed vulnerabilities in FortiNAC. A unauthenticated malicious person could exploit the vulnerabilities to execute arbitrary code or manipulate files on the FortiNAC system. This requires malicious network traffic must be sent to TCP port 1050 or 5555. Fortinet has released updates t...

LockBit Ransomware Extorts $91 Million from U.S. Companies

The threat actors behind the LockBit ransomware-as-a-service RaaS scheme have extorted $91 million following hundreds of attacks against numerous U.S. organizations since 2020. That's according to a joint bulletin published by the U.S. Cybersecurity and Infrastructure Security Agency CISA, the...

Microsoft .NET Framework和Microsoft Visual Studio 安全漏洞

Microsoft Visual Studio is a family of development tool suites and a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft .NET Framework is a comprehensive and consistent programming model and development platform for building...

The vulnerability of Juniper Networks’ Junos operating system in Junos ACX2K Series devices, which allows a hacker to trigger a service failure.

The vulnerability of Juniper Networks’ Junos operating system in ACX2K Series devices is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger service failures remotely...

CVE-2023-35035

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-23557...

CVE-2023-35032

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow command injection by authenticated users, aka OSFOURK-23554...

The vulnerability of the TL1 protocol implementation in Cisco IOS XR Network Convergence System (NCS) 4000 Series routers allows a attacker to cause service interruptions.

The vulnerability of the TL1 protocol implementation in Cisco IOS XR Network Convergence System NCS 4000 Series routers is related to uncontrolled memory allocation. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2022-4240

creationtimestamp| type| source ---|---|--- 2023-06-01 05:18:03+00:00| seen| https://t.me/cibsecurity/64790...

CVE-2023-24584

Controller 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature. This issue affects Controller 6000: before vCR8.80.230201a, before vCR8.70.230201a, before vCR8.60.230201b, before vCR8.50.230201a, all versions of vCR8.40 and prior...

Vulnerability fixed in Arista series 7000 switches

Arista has fixed a vulnerability in the EOS software of several Series 7000 switches. A malicious party can exploit abuse the vulnerability to use a manipulated DHCP packet to crash and restart the DHCP relay service to crash and restart, thus creating a partial Denial-of-Service can occur. Arist...

CVE-2022-35750

Win32k Elevation of Privilege Vulnerability...

CVE-2022-32726

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...

CVE-2022-32705

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...

CVE-2022-47152

creationtimestamp| type| source ---|---|--- 2023-05-24 20:27:18+00:00| seen| https://t.me/cibsecurity/64697...

CVE-2022-46816

creationtimestamp| type| source ---|---|--- 2023-05-24 20:27:04+00:00| seen| https://t.me/cibsecurity/64686...

CVE-2022-47880

creationtimestamp| type| source ---|---|--- 2023-05-12 18:27:09+00:00| seen| https://t.me/cibsecurity/64023...

CVE-2022-36330

creationtimestamp| type| source ---|---|--- 2023-05-10 07:14:03+00:00| seen| https://t.me/cibsecurity/63719...

CVE-2022-45812

creationtimestamp| type| source ---|---|--- 2023-05-08 16:51:22+00:00| seen| https://t.me/cibsecurity/63421...

PT-2023-3026 · Wago · Wago Cc100 +4

Name of the Vulnerable Software and Affected Versions: WAGO PFC100 versions =16 and =16 and =16 and =16 and =16 and =16 and =16 and =16 and =16 and =16 and =23, update to a version outside of this range to mitigate the risk. As a temporary workaround, consider restricting access to the device...