com.clever-cloud.pulsar4s:pulsar4s-akka-streams_2.12 (>=2.8.0 <=2.8.1), com.clever-cloud.pulsar4s:pulsar4s-akka-streams_2.13 (>=2.8.0 <=2.8.1) +112 more potentially affected by CVE-2022-33681 via org.apache.pulsar:pulsar-client (>=2.9.0 <=2.9.2)

org.apache.pulsar:pulsar-client MAVEN version =2.9.0, =2.8.0, =2.8.0, =2.8.0, =2.8.0, =2.8.0, =2.8.0, =2.8.0, =2.8.0, =2.8.0, =2.8.0, =2.8.0, =2.8.0, =2.8.0, =2.8.0, =2.8.0, =2.8.1 and more Source cves: CVE-2022-33681 Source advisory: OSV:GHSA-C5FP-X2H5-VJV7...

The vulnerability of the TLS protocol implementation in the Illumina Local Run Manager software allows a perpetrator to compromise the confidentiality of protected information, including login credentials.

The vulnerability of the TLS protocol implementation in the Illumina Local Run Manager lies in the transmission of data in an open manner. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of protected information, including login credentials...

F5 BIG-IP Traffic Intelligence Feeds Certificate Validation Error Vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A certificate validation error vulnerability exists in F5 BIG-IP Traffic Intelligence Feeds, which can be exploited by...

F5 BIG-IP 信任管理问题漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A certificate validation error vulnerability exists in F5 BIG-IP Traffic Intelligence Feeds, which can be exploited by...

‘Killnet’ Adversary Pummels Lithuania with DDoS Attacks Over Blockade

Russia-linked cyber collective Killnet has claimed responsibility for DDoS attacks Monday on the Lithuanian government and other entities in the Baltic country over closure of transit routes within the Russian exclave of Kaliningrad, according to researchers. The threat group warns that it will...

PT-2022-3176 · Emerson · Emerson Deltav Distributed Control System

Name of the Vulnerable Software and Affected Versions: Emerson DeltaV Distributed Control System DCS versions prior to 14.3 Description: The issue is related to insufficient verification of firmware integrity, specifically an inadequate checksum approach and lack of signature. This could...

CVE-2021-32997

The affected Baker Hughes Bentley Nevada products 3500 System 1 6.x, Part No. 3060/00 versions 6.98 and prior, 3500 System 1, Part No. 3071/xx & 3072/xx versions 21.1 HF1 and prior, 3500 Rack Configuration, Part No. 129133-01 versions 6.4 and prior, and 3500/22M Firmware, Part No. 288055-01...

CVE-2022-22191

A Denial of Service DoS vulnerability in the processing of a flood of specific ARP traffic in Juniper Networks Junos OS on the EX4300 switch, sent from the local broadcast domain, may allow an unauthenticated network-adjacent attacker to trigger a PFEMAN watchdog timeout, causing the Packet...

Backdoor.Win32.Easyserv.11.c Insecure Transit

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/3b5564e88a0b8a41e4fd730891e635cc.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Easyserv.11.c Vulnerability: Insecure Transit Description: The malware makes outbound...

Authorization

An Insufficient Algorithmic Complexity combined with an Allocation of Resources Without Limits or Throttling vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on SRX Series and MX Series with SPC3 allows an unauthenticated network attacker to cause latency in transit...

Juniper Junos OS Vulnerability (JSA11261)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11261 advisory. - An Insufficient Algorithmic Complexity combined with an Allocation of Resources Without Limits or Throttling vulnerability in the flow processing daemon flowd of Juniper...

Backdoor.Win32.Dsklite.a Insecure Transit

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/6c9665de78ae60a8e057d2c9cdb91596B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Dsklite.a Vulnerability: Insecure Transit Description: The malware listens on TCP...

CVE-2021-40366

A vulnerability has been identified in Climatix POL909 AWB module All versions V11.42, Climatix POL909 AWM module All versions V11.34. The web server of affected devices transmits data without TLS encryption. This could allow an unauthenticated remote attacker in a man-in-the-middle position to...

CVE-2021-40366

A vulnerability has been identified in Climatix POL909 AWB module All versions V11.42, Climatix POL909 AWM module All versions V11.34. The web server of affected devices transmits data without TLS encryption. This could allow an unauthenticated remote attacker in a man-in-the-middle position to...

PT-2021-22879 · Unknown · Climatix Pol909

Name of the Vulnerable Software and Affected Versions: Climatix POL909 AWB module versions prior to V11.42 Climatix POL909 AWM module versions prior to V11.34 Description: A vulnerability has been identified where the web server of affected devices transmits data without TLS encryption. This coul...

Backdoor.Win32.VB.afu Insecure Transit

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/c6ba7fcb9eb9bdd7e081e2e84e784dcbB.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.VB.afu Vulnerability: Insecure Transit Password Disclosure Description: The malware...

Enhance Network Security for AWS Transit Gateway

Increase security and visibility for lateral and outbound network-loads using the look-aside inspection architecture...

Enhance Network Security for AWS Transit Gateway

Increase security and visibility for lateral and outbound network-loads using the look-aside inspection architecture...

Apple Pay with Visa Hacked to Make Payments via Unlocked iPhones

An attacker who steals a locked iPhone can use a stored Visa card to make contactless payments worth up to thousands of dollars without unlocking the phone, researchers are warning. The problem is due to unpatched vulnerabilities in both the Apple Pay and Visa systems, according to an academic te...

Backdoor.Win32.Agent.aer Insecure Transit / Password Disclosure

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/9576a6a59715a69be499fa41d6383a64B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Agent.aer Vulnerability: Insecure Transit Password Disclosure Description: The malwa...