‼ CVE-2022-35168 ‼
📖 Read
via "National Vulnerability Database".
Due to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker can perform a denial-of-service attack rendering the system temporarily inoperative.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2022-35170 ‼
📖 Read
via "National Vulnerability Database".
SAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting (XSS) vulnerability, therefore changing the scope of the attack. This leads to limited impact on confidentiality and integrity of data.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29187 ‼
📖 Read
via "National Vulnerability Database".
Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5, is vulnerable to privilege escalation in all platforms. An unsuspecting user could still be affected by the issue reported in CVE-2022-24765, for example when navigating as root into a shared tmp directory that is owned by them, but where an attacker could create a git repository. Versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5 contain a patch for this issue. The simplest way to avoid being affected by the exploit described in the example is to avoid running git as root (or an Administrator in Windows), and if needed to reduce its use to a minimum. While a generic workaround is not possible, a system could be hardened from the exploit described in the example by removing any such repository if it exists already and creating one as root to block any future attacks.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31134 ‼
📖 Read
via "National Vulnerability Database".
Zulip is an open-source team collaboration tool. Zulip Server versions 2.1.0 above have a user interface tool, accessible only to server owners and server administrators, which provides a way to download a "public data" export. While this export is only accessible to administrators, in many configurations server administrators are not expected to have access to private messages and private streams. However, the "public data" export which administrators could generate contained the attachment contents for all attachments, even those from private messages and streams. Zulip Server version 5.4 contains a patch for this issue.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31012 ‼
📖 Read
via "National Vulnerability Database".
Git for Windows is a fork of Git that contains Windows-specific patches. This vulnerability in versions prior to 2.37.1 lets Git for Windows' installer execute a binary into `C:\mingw64\bin\git.exe` by mistake. This only happens upon a fresh install, not when upgrading Git for Windows. A patch is included in version 2.37.1. Two workarounds are available. Create the `C:\mingw64` folder and remove read/write access from this folder, or disallow arbitrary authenticated users to create folders in `C:\`.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31598 ‼
📖 Read
via "National Vulnerability Database".
Due to insufficient input validation, SAP Business Objects - version 420, allows an authenticated attacker to submit a malicious request through an allowed operation. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24800 ‼
📖 Read
via "National Vulnerability Database".
October/System is the system module for October CMS, a self-hosted CMS platform based on the Laravel PHP Framework. Prior to versions 1.0.476, 1.1.12, and 2.2.15, when the developer allows the user to specify their own filename in the `fromData` method, an unauthenticated user can perform remote code execution (RCE) by exploiting a race condition in the temporary storage directory. This vulnerability affects plugins that expose the `October\Rain\Database\Attach\File::fromData` as a public interface and does not affect vanilla installations of October CMS since this method is not exposed or used by the system internally or externally. The issue has been patched in Build 476 (v1.0.476), v1.1.12, and v2.2.15. Those who are unable to upgrade may apply with patch to their installation manually as a workaround.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28771 ‼
📖 Read
via "National Vulnerability Database".
Due to missing authentication check, SAP Business one License service API - version 10.0 allows an unauthenticated attacker to send malicious http requests over the network. On successful exploitation, an attacker can break the whole application making it inaccessible.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31654 ‼
📖 Read
via "National Vulnerability Database".
VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in configurations.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31591 ‼
📖 Read
via "National Vulnerability Database".
SAP BusinessObjects BW Publisher Service - versions 420, 430, uses a search path that contains an unquoted element. A local attacker can gain elevated privileges by inserting an executable file in the path of the affected service📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35171 ‼
📖 Read
via "National Vulnerability Database".
When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22998 ‼
📖 Read
via "National Vulnerability Database".
Implemented protections on AWS credentials that were not properly protected.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35172 ‼
📖 Read
via "National Vulnerability Database".
SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31593 ‼
📖 Read
via "National Vulnerability Database".
SAP Business One client - version 10.0 allows an attacker with low privileges, to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35225 ‼
📖 Read
via "National Vulnerability Database".
SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting (XSS) vulnerability, therefore changing the scope of the attack. This leads to limited impact on confidentiality and integrity of data.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1025 ‼
📖 Read
via "National Vulnerability Database".
All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potentially escalate their privileges to admin-level.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35224 ‼
📖 Read
via "National Vulnerability Database".
SAP Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. This attack can be used to non-permanently deface or modify portal content. The execution of script content by a victim registered on the portal could compromise the confidentiality and integrity of victim?s web browser session.📖 Read
via "National Vulnerability Database".
🕴 PyPI Mandates 2FA, Plans Google Titan Key Giveaway 🕴
📖 Read
via "Dark Reading".
Python's most popular package manager is intent on securing the supply chain by requiring developers to enable two-factor authentication.📖 Read
via "Dark Reading".
Dark Reading
PyPI Mandates 2FA, Plans Google Titan Key Giveaway
Python's most popular package manager is intent on securing the supply chain by requiring developers to enable two-factor authentication.
‼ CVE-2022-30211 ‼
📖 Read
via "National Vulnerability Database".
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22031 ‼
📖 Read
via "National Vulnerability Database".
Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-33633 ‼
📖 Read
via "National Vulnerability Database".
Skype for Business and Lync Remote Code Execution Vulnerability.📖 Read
via "National Vulnerability Database".