CVE-2022-20649

A vulnerability in Cisco RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to perform remote code execution on the application with root-level privileges in the context of the configured container. This vulnerability exists because the debug mode is incorrectly enabled...

CVE-2022-28669

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-22089

Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables...

CVE-2020-2718

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2024-49348

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows restricting access to organizational data to valid contexts. The fact that tasks of type comment can be reassigned via API implicitly...

PT-2025-5774 · Asterisk +1 · Asterisk +1

Name of the Vulnerable Software and Affected Versions: Asterisk version 22 Description: The issue allows a remote attacker to execute arbitrary code via the action createconfig function. This is due to an insecure permissions vulnerability. Recommendations: For Asterisk version 22, as a temporary...

SUSE CVE-2025-23085

A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory...

CVE-2025-23607

creationtimestamp| type| source ---|---|--- 2025-01-22 15:19:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo4girpc2h...

Microsoft Digest Authentication 安全漏洞

Microsoft Digest Authentication is a simple authentication mechanism from Microsoft USA. A security vulnerability exists in Microsoft Digest Authentication. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are affected:Windows 10 Version...

Microsoft Windows COM 资源管理错误漏洞

Microsoft Windows COM is a technology for the purpose of reusing software from Microsoft Corporation USA.COM is described as a platform-independent, decentralized, object-oriented system for creating interactive binary software components. A resource management error vulnerability exists in...

Microsoft Windows Virtualization-Based Security Enclave 输入验证错误漏洞

Microsoft Windows Virtualization-Based Security Enclave Microsoft Windows VBS Enclave is a software-based trusted execution environment within the host application address space from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Virtualization-Base...

PT-2025-1124 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions prior to 2024 January-2025 Security Update Ivanti EPM versions prior to 2022 SU6 January-2025 Security Update Description: The issue is related to an out-of-bounds read in Ivanti EPM, which allows a local authenticated...

CVE-2022-4946

creationtimestamp| type| source ---|---|--- 2025-01-08 17:14:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/739...

CVE-2022-36509

creationtimestamp| type| source ---|---|--- 2024-12-22 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-22 2025-06-17 19:39:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18650 2025-07-07 00:00:00+00:00| exploited| The...

PT-2024-11634 · Microsoft · Windows 11 +1

Name of the Vulnerable Software and Affected Versions: Windows 11 version 10.0.22000.593 Windows Server 2022 version 10.0.20348.643 Description: An access violation vulnerability exists in the DirectComposition functionality of the win32kbase.sys driver. A specially-crafted set of syscalls can le...

CVE-2024-37377

A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service...

DEBIAN-CVE-2024-53566

An issue in the actionlistcategories function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0-rc2/22.0.0-pre1 allows attackers to execute a path traversal...

ALPINE-CVE-2024-53566

An issue in the actionlistcategories function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0-rc2/22.0.0-pre1 allows attackers to execute a path traversal...

UBUNTU-CVE-2024-53566

An issue in the actionlistcategories function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0-rc2/22.0.0-pre1 allows attackers to execute a path traversal...

Sangoma Technologies Asterisk 安全漏洞

Sangoma Technologies Asterisk is a suite of open source telephone switch PBX system software from Canadian company Sangoma Technologies. The software supports voicemail, multi-party voice conferencing, interactive voice response IVR, and more. A security vulnerability exists in Sangoma Technologi...