13106 matches found
CVE-2022-36659
xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vipciwrite. This vulnerability allows attackers to cause a Denial of Service via unspecified vectors...
Null pointer dereference
xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vipciread. This vulnerability allows attackers to cause a Denial of Service via unspecified vectors...
Null pointer dereference
xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vipciwrite. This vulnerability allows attackers to cause a Denial of Service via unspecified vectors...
CVE-2022-36661
xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vipciread. This vulnerability allows attackers to cause a Denial of Service via unspecified vectors...
CVE-2022-36659
xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vipciwrite. This vulnerability allows attackers to cause a Denial of Service via unspecified vectors...
Stop Worrying About Passwords Forever
So far 2022 confirms that passwords are not dead yet. Neither will they be anytime soon. Even though Microsoft and Apple are championing passwordless authentication methods, most applications and websites will not remove this option for a very long time. Think about it, internal apps that you do...
You’re never going to be able to fix every security vulnerability, but knowing where to start helps
Milpitas, California, August 29, 2022 -- IT security operations, risk management and infrastructure teams face a daily challenge: do more with less. And in the face of increasing threats from cybercriminals and exponentially expanding attack vectors, teams are going to have to turn to intelligent...
CVE-2022-36350
Stored cross-site scripting vulnerability in PukiWiki versions 1.3.1 to 1.5.3 allows a remote attacker to inject an arbitrary script via unspecified vectors...
Cross site scripting
Stored cross-site scripting vulnerability in PukiWiki versions 1.3.1 to 1.5.3 allows a remote attacker to inject an arbitrary script via unspecified vectors...
Cross site scripting
Reflected cross-site scripting vulnerability in PukiWiki versions 1.5.1 to 1.5.3 allows a remote attacker to inject an arbitrary script via unspecified vectors...
New Air-Gap Attack Uses MEMS Gyroscope Ultrasonic Covert Channel to Leak Data
A novel data exfiltration technique has been found to leverage a covert ultrasonic channel to leak sensitive information from isolated, air-gapped computers to a nearby smartphone that doesn't even require a microphone to pick up the sound waves. Dubbed GAIROSCOPE, the adversarial model is the...
PukiWiki 跨站脚本漏洞
PukiWiki is a set of Wiki software by Lindsay's personal developer. A security vulnerability exists in PukiWiki versions 1.3.1 through 1.5.3. A remote attacker can exploit this vulnerability to inject arbitrary scripts via unspecified vectors...
CVE-2022-32544
Operation restriction bypass vulnerability in Project of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the data of Project via unspecified vectors...
CVE-2022-28715
Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors...
CVE-2022-32544
Operation restriction bypass vulnerability in Project of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the data of Project via unspecified vectors...
CVE-2022-29487
Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors...
CVE-2022-29487
Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors...
CVE-2022-30604
Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors...
CVE-2022-28715
Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors...