‼ CVE-2022-34838 ‼
📖 Read
via "National Vulnerability Database".
Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add or alter data points and corresponding attributes. Once such engineering data is used the data visualization will be altered for the end user.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2978 ‼
📖 Read
via "National Vulnerability Database".
A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function nilfs_mdt_destroy. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4178 ‼
📖 Read
via "National Vulnerability Database".
A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged attacker to supply malicious YAML.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4037 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2234 ‼
📖 Read
via "National Vulnerability Database".
An authenticated mySCADA myPRO 8.26.0 user may be able to modify parameters to run commands directly in the operating system.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4040 ‼
📖 Read
via "National Vulnerability Database".
A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the broker through a sustained attack of maliciously crafted messages. The highest threat from this vulnerability is system availability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4218 ‼
📖 Read
via "National Vulnerability Database".
A flaw was found in the Linux kernel’s implementation of reading the SVC RDMA counters. Reading the counter sysctl panics the system. This flaw allows a local attacker with local access to cause a denial of service while the system reboots. The issue is specific to CentOS/RHEL.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4213 ‼
📖 Read
via "National Vulnerability Database".
A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4217 ‼
📖 Read
via "National Vulnerability Database".
A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4028 ‼
📖 Read
via "National Vulnerability Database".
A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free. Given the ability to execute code, a local attacker could leverage this use-after-free to crash the system or possibly escalate privileges on the system.📖 Read
via "National Vulnerability Database".
🕴 Ransomware Gang Demands $10M in Attack on French Hospital 🕴
📖 Read
via "Dark Reading".
Center Hospitalier Sud Francilien (CHSF), a hospital outside of Paris, has redirected incoming patients to other medical facilities in the wake of a ransomware attack that began on Aug. 21.📖 Read
via "Dark Reading".
Dark Reading
Ransomware Gang Demands $10M in Attack on French Hospital
Center Hospitalier Sud Francilien (CHSF), a hospital outside of Paris, has redirected incoming patients to other medical facilities in the wake of a ransomware attack that began on Aug. 21.
🕴 Efficient 'MagicWeb' Malware Subverts AD FS Authentication, Microsoft Warns 🕴
📖 Read
via "Dark Reading".
The Russia-backed Nobelium APT has pioneered a post-exploitation tool allowing attackers to authenticate as any user.📖 Read
via "Dark Reading".
Dark Reading
Efficient 'MagicWeb' Malware Subverts AD FS Authentication, Microsoft Warns
The Russia-backed Nobelium APT has pioneered a post-exploitation tool allowing attackers to authenticate as any user.
🕴 CISA: Just-Disclosed Palo Alto Networks Firewall Bug Under Active Exploit 🕴
📖 Read
via "Dark Reading".
The bug tracked as CVE-2022-0028 allows attackers to hijack firewalls without authentication, in order to mount DDoS hits on their targets of choice.📖 Read
via "Dark Reading".
Dark Reading
CISA: Just-Disclosed Palo Alto Networks Firewall Bug Under Active Exploit
The bug tracked as CVE-2022-0028 allows attackers to hijack firewalls without authentication, in order to mount DDoS hits on their targets of choice.
‼ CVE-2022-32837 ‼
📖 Read
via "National Vulnerability Database".
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may be able to cause unexpected system termination or write kernel memory.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32893 ‼
📖 Read
via "National Vulnerability Database".
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32857 ‼
📖 Read
via "National Vulnerability Database".
This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. A user in a privileged network position can track a user’s activity.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32839 ‼
📖 Read
via "National Vulnerability Database".
The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. A remote user may cause an unexpected app termination or arbitrary code execution.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32812 ‼
📖 Read
via "National Vulnerability Database".
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina. An app may be able to execute arbitrary code with kernel privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32793 ‼
📖 Read
via "National Vulnerability Database".
Multiple out-of-bounds write issues were addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may be able to disclose kernel memory.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32811 ‼
📖 Read
via "National Vulnerability Database".
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina. An app may be able to execute arbitrary code with kernel privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32834 ‼
📖 Read
via "National Vulnerability Database".
An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina. An app may be able to access sensitive user information.📖 Read
via "National Vulnerability Database".