‼ CVE-2022-39072 ‼
📖 Read
via "National Vulnerability Database".
There is a SQL injection vulnerability in Some ZTE Mobile Internet products. Due to insufficient validation of the input parameters of the SNTP interface, an authenticated attacker could use the vulnerability to execute stored XSS attacks.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46761 ‼
📖 Read
via "National Vulnerability Database".
The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-47974 ‼
📖 Read
via "National Vulnerability Database".
The Bluetooth AVRCP module has a vulnerability that can lead to DoS attacks.Successful exploitation of this vulnerability may cause the Bluetooth process to restart.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-47976 ‼
📖 Read
via "National Vulnerability Database".
The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this vulnerability may disconnect normal service connections.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-47975 ‼
📖 Read
via "National Vulnerability Database".
The DUBAI module has a double free vulnerability.Successful exploitation of this vulnerability may affect system availability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46762 ‼
📖 Read
via "National Vulnerability Database".
The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-39073 ‼
📖 Read
via "National Vulnerability Database".
There is a command injection vulnerability in ZTE MF286R, Due to insufficient validation of the input parameters, an attacker could use the vulnerability to execute arbitrary commands.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46868 ‼
📖 Read
via "National Vulnerability Database".
The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access.📖 Read
via "National Vulnerability Database".
🕴 Russia-Linked Turla APT Sneakily Co-Opts Ancient Andromeda USB Infections 🕴
📖 Read
via "Dark Reading".
Using command-and-control servers from the decade-old Andromeda malware, the group is installing reconnaissance tools and a backdoor on previously infected systems to target Ukrainian victims.📖 Read
via "Dark Reading".
Dark Reading
Russia-Linked Turla APT Sneakily Co-Opts Ancient Andromeda USB Infections
Using command-and-control servers from the decade-old Andromeda malware, the group is installing reconnaissance tools and a backdoor on previously infected systems to target Ukrainian victims.
‼ CVE-2022-2484 ‼
📖 Read
via "National Vulnerability Database".
The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed allowing an attacker to run modified firmware. This could result in the execution of a malicious kernel, arbitrary programs, or modified Nokia programs.📖 Read
via "National Vulnerability Database".
‼ CVE-2018-25068 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been found in devent globalpom-utils up to 4.5.0 and classified as critical. This vulnerability affects the function createTmpDir of the file globalpomutils-fileresources/src/main/java/com/anrisoftware/globalpom/fileresourcemanager/FileResourceManagerProvider.java. The manipulation leads to insecure temporary file. The attack can be initiated remotely. Upgrading to version 4.5.1 is able to address this issue. The name of the patch is 77a820bac2f68e662ce261ecb050c643bd7ee560. It is recommended to upgrade the affected component. VDB-217570 is the identifier assigned to this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-44939 ‼
📖 Read
via "National Vulnerability Database".
Efs Software Easy Chat Server Version 3.1 was discovered to contain a DLL hijacking vulnerability via the component TextShaping.dll. This vulnerability allows attackers to execute arbitrary code via a crafted DLL.📖 Read
via "National Vulnerability Database".
‼ CVE-2018-25067 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability, which was classified as critical, was found in JoomGallery up to 3.3.3. This affects an unknown part of the file administrator/components/com_joomgallery/views/config/tmpl/default.php of the component Image Sort Handler. The manipulation leads to sql injection. Upgrading to version 3.3.4 is able to address this issue. The name of the patch is dc414ee954e849082260f8613e15a1c1e1d354a1. It is recommended to upgrade the affected component. The identifier VDB-217569 was assigned to this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-40201 ‼
📖 Read
via "National Vulnerability Database".
Bentley Systems MicroStation Connect versions 10.17.0.209 and prior are vulnerable to a Stack-Based Buffer Overflow when a malformed design (DGN) file is parsed. This may allow an attacker to execute arbitrary code.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41613 ‼
📖 Read
via "National Vulnerability Database".
Bentley Systems MicroStation Connect versions 10.17.0.209 and prior are vulnerable to an Out-of-Bounds Read when when parsing DGN files, which may allow an attacker to crash the product, disclose sensitive information, or execute arbitrary code.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2482 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability exists in Nokia’s ASIK AirScale system module (versions 474021A.101 and 474021A.102) that could allow an attacker to place a script on the file system accessible from Linux. A script placed in the appropriate place could allow for arbitrary code execution in the bootloader.📖 Read
via "National Vulnerability Database".
‼ CVE-2013-10008 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in sheilazpy eShop. It has been classified as critical. Affected is an unknown function. The manipulation leads to sql injection. The name of the patch is e096c5849c4dc09e1074104531014a62a5413884. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217572.📖 Read
via "National Vulnerability Database".
‼ CVE-2014-125052 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in JervenBolleman sparql-identifiers and classified as critical. This issue affects some unknown processing of the file src/main/java/org/identifiers/db/RegistryDao.java. The manipulation leads to sql injection. The name of the patch is 44bb0db91c064e305b192fc73521d1dfd25bde52. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217571.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2483 ‼
📖 Read
via "National Vulnerability Database".
The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for firmware verification signature. If an attacker modifies the flash contents to corrupt the keys, secure boot could be permanently disabled on a given device.📖 Read
via "National Vulnerability Database".
🕴 In Memoriam: Remembering Those Who Passed 🕴
📖 Read
via "Dark Reading".
Security stands on the shoulders of giants. We take a moment to remember their contributions toward keeping people, data, and systems safe.📖 Read
via "Dark Reading".
Dark Reading
In Memoriam: Remembering Those Who Passed
Security stands on the shoulders of giants. We take a moment to remember their contributions toward keeping people, data, and systems safe.
‼ CVE-2022-45911 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur on the Classic UI login page by injecting arbitrary JavaScript code in the username field. This occurs before the user logs into the system, which means that even if the attacker executes arbitrary JavaScript, they will not get any sensitive information.📖 Read
via "National Vulnerability Database".