Design/Logic Flaw

Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite component: Workflow, Approval, Work Force Management. Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2023-21834

CVE-2023-21834 affects Oracle E-Business Suite 12.2.3–12.2.12, specifically the Workflow, Approval, and Work Force Management components (Self-Service Human Resources). A low-privilege, network-accessible attacker can exploit via HTTP to }compromise data integrity, enabling unauthorized update, i...

PT-2023-1201 · Oracle · Oracle E-Business Suite

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.12 Description: The issue is related to insufficient input validation in the Workflow, Approval, and Work Force Management components of Oracle Self-Service Human Resources. This allows a...

PT-2023-33123 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: A race condition exists on the per-CQ variable napi work done. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v6.0.13...

CVE-2023-21834: Undefined Security Weakness

Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite component: Workflow, Approval, Work Force Management. Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...

PT-2023-33489

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v6.0.13 through v6.0.18 Description The issue is related to a failure to cancel delayed bond work in the net/mlx5 component, potentially leading to security vulnerabilities. The actual impact and attack plausibility have...

PT-2023-34499

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns an immediate work request flush to completion queue in RDMA/siw. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2023-33122 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: A potential security issue has been identified in the Linux Kernel, related to a freed work crash in the slcan component. The actual impact and attack plausibility have not yet been proven...

PT-2023-34190

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.3 through v5.15.85 Description The issue is related to the RDMA/siw component, specifically concerning the handling of immediate work request flush to completion queue. The actual impact and attack plausibility have no...

kernel: netfilter: flowtable: fix stuck flows on cleanup due to pending work

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: fix stuck flows on cleanup due to pending work To clear the flow table on flow table free, the following sequence normally happens in order: 1 gcstep work is stopped to disable any further stats/del requests...

Rapid7 Announces Global Days Off to Support Employees in 2023

On January 3rd, it was a little bit quieter than usual here at Rapid7. That's because our offices were closed for our first of five Global Days Off for 2023. Global Days Off are designed to encourage teams around the world to unplug and rest, enabling them to bring their best selves back to work...

Decarbonizing Cryptocurrencies through Taxation

Maintaining bitcoin and other cryptocurrencies causes about 0.3 percent of global CO2 emissions. That may not sound like a lot, but its more than the emissions of Switzerland, Croatia, and Norway combined. As many cryptocurrencies crash and the FTX bankruptcy moves into the litigation stage,...

Enforcement vs. Enrollment-based Security: How to Balance Security and Employee Trust

Challenges with an enforcement-based approach An enforcement-based approach to security begins with a security policy backed by security controls, often heavy-handed and designed to prevent employees from engaging in risky behavior or inadvertently expanding the potential attack surface of an...

PT-2025-40126

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc5 mlnx Description A flaw exists in the net/mlx5 component of the Linux kernel related to delayed bond work cancellation. A missing call to cancel delayed work could lead to the execution of code on an...

optimuspyspark (>=2.0.3, <=2.1.0), takemessagecleaner (>=1.1.0, <=1.1.4) +1 more potentially affected by CVE-2022-40897 via setuptools (40.2.0)

setuptools PYPI version 40.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - optimuspyspark =2.0.3, =1.1.0, =1.1.4 - work-weixin 0.0.2.3 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

optimuspyspark (>=2.0.3, <=2.1.0), takemessagecleaner (>=1.1.0, <=1.1.4) +1 more potentially affected by CVE-2022-40897 via setuptools (40.2.0)

setuptools PYPI version 40.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - optimuspyspark =2.0.3, =1.1.0, =1.1.4 - work-weixin 0.0.2.3 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

Microsoft Intune: 5 endpoint management predictions for 2023

The end of the year typically brings with it a small library of reports with predictions for the year ahead. The value in these reports is less in the precise predictions themselves—given how interconnected the world is, no one has a perfect crystal ball. Rather, the forecasts help frame the...

Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2022-89421)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft Corporation USA. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information.A remo...

Rapid7 Recognized as a Top Place to Work for 11th Consecutive Year

On November 30th, 2022, Rapid7 was again recognized by The Boston Globe as a Top Place to Work in Massachusetts. This marks the 11th consecutive year Rapid7 has made the list, this time coming in at 3 in the large company category. Top Places to Work rankings are based on a Globe survey that...

PT-2022-36132

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.80 Description The issue concerns a potential race in kcm tx work. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.6 and fixed in Linux Kernel version...