🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2021-44506 ‼

An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of input validation in calls to do_verify in sr_unix/do_verify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer.

📖 Read

via "National Vulnerability Database".

91 views20:33

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-26784 ‼

Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability. This CVE ID is unique from CVE-2022-24484, CVE-2022-24538.

📖 Read

via "National Vulnerability Database".

91 views20:33

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-26827 ‼

Windows File Server Resource Management Service Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-26810.

📖 Read

via "National Vulnerability Database".

93 views20:33

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2021-44492 ‼

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attackers can cause a type to be incorrectly initialized in the function f_incr in sr_port/f_incr.c and cause a crash due to a NULL pointer dereference.

📖 Read

via "National Vulnerability Database".

88 views20:33

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-26822 ‼

Windows DNS Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24536, CVE-2022-26811, CVE-2022-26812, CVE-2022-26813, CVE-2022-26814, CVE-2022-26815, CVE-2022-26817, CVE-2022-26818, CVE-2022-26819, CVE-2022-26820, CVE-2022-26821, CVE-2022-26823, CVE-2022-26824, CVE-2022-26825, CVE-2022-26826, CVE-2022-26829.

📖 Read

via "National Vulnerability Database".

90 views20:33

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-24550 ‼

Windows Telephony Server Elevation of Privilege Vulnerability.

📖 Read

via "National Vulnerability Database".

91 views20:33

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-26815 ‼

Windows DNS Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24536, CVE-2022-26811, CVE-2022-26812, CVE-2022-26813, CVE-2022-26814, CVE-2022-26817, CVE-2022-26818, CVE-2022-26819, CVE-2022-26820, CVE-2022-26821, CVE-2022-26822, CVE-2022-26823, CVE-2022-26824, CVE-2022-26825, CVE-2022-26826, CVE-2022-26829.

📖 Read

via "National Vulnerability Database".

91 views20:34

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-26819 ‼

Windows DNS Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24536, CVE-2022-26811, CVE-2022-26812, CVE-2022-26813, CVE-2022-26814, CVE-2022-26815, CVE-2022-26817, CVE-2022-26818, CVE-2022-26820, CVE-2022-26821, CVE-2022-26822, CVE-2022-26823, CVE-2022-26824, CVE-2022-26825, CVE-2022-26826, CVE-2022-26829.

📖 Read

via "National Vulnerability Database".

88 views20:34

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-28113 ‼

An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without having a valid session cookie.

📖 Read

via "National Vulnerability Database".

93 views20:34

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2021-44486 ‼

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value of a function pointer used in op_write in sr_port/op_write.c in order to gain control of the flow of execution.

📖 Read

via "National Vulnerability Database".

97 views20:34

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-26917 ‼

Windows Fax Compose Form Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-26916, CVE-2022-26918.

📖 Read

via "National Vulnerability Database".

100 views20:34

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-24479 ‼

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability.

📖 Read

via "National Vulnerability Database".

104 views20:34

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2021-44497 ‼

An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, can cause the bounds of a for loop to be miscalculated, which leads to a use after free condition a pointer is pushed into previously free memory by the loop.

📖 Read

via "National Vulnerability Database".

108 views20:34

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-24481 ‼

Windows Common Log File System Driver Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-24521.

📖 Read

via "National Vulnerability Database".

114 views20:36

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-21983 ‼

Win32 Stream Enumeration Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24534.

📖 Read

via "National Vulnerability Database".

124 views20:36

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2021-44482 ‼

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to do_verify in sr_unix/do_verify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer.

📖 Read

via "National Vulnerability Database".

138 views20:36

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-26811 ‼

Windows DNS Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24536, CVE-2022-26812, CVE-2022-26813, CVE-2022-26814, CVE-2022-26815, CVE-2022-26817, CVE-2022-26818, CVE-2022-26819, CVE-2022-26820, CVE-2022-26821, CVE-2022-26822, CVE-2022-26823, CVE-2022-26824, CVE-2022-26825, CVE-2022-26826, CVE-2022-26829.

📖 Read

via "National Vulnerability Database".

162 views20:36

🛡 Cybersecurity & Privacy 🛡 - News

🔏 Friday Five 4/15 🔏

In this week’s Friday Five, catch up on the latest attacks from Russian and North Korean hackers, a shocking report on businesses’ willingness to prioritize security, why consumers are caring less about their own security, and more!

📖 Read

via "".

Digital Guardian

Friday Five 4/15

In this week’s Friday Five, catch up on the latest attacks from Russian and North Korean hackers, a shocking report on businesses’ willingness to prioritize security, why consumers are caring less about their own security, and more!

183 views20:49

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-27427 ‼

A zero-code remote code injection vulnerability via configuration.php in Chamilo LMS v1.11.13 allows attackers to upload arbitrary code in the form of a new plugin.

📖 Read

via "National Vulnerability Database".

174 views22:20

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-29072 ‼

7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area.

📖 Read

via "National Vulnerability Database".

179 views22:20

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-27423 ‼

Chamilo LMS v1.11.13 was discovered to contain a SQL injection vulnerability via the blog_id parameter at /blog/blog.php.

📖 Read

via "National Vulnerability Database".

173 views22:20

About

Blog

Apps

Platform