🛡 Cybersecurity & Privacy 🛡 - News
25.8K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
‼ CVE-2022-45166 ‼

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a set of user-controlled parameters that are used to act on the data returned to the user. It allows a basic user to access data unrelated to their role.

📖 Read

via "National Vulnerability Database".
‼ CVE-2022-36442 ‼

An issue was discovered in Zebra Enterprise Home Screen 4.1.19. By using the embedded Google Chrome application, it is possible to install an unauthorized application via a downloaded APK.

📖 Read

via "National Vulnerability Database".
‼ CVE-2022-38490 ‼

An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. Some parameters allow SQL injection.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-21677 ‼

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability. This CVE ID is unique from CVE-2023-21683, CVE-2023-21758.

📖 Read

via "National Vulnerability Database".
‼ CVE-2022-38481 ‼

An issue was discovered in Mega HOPEX 15.2.0.6110 before V5CP2. The application is prone to reflected Cross-site Scripting (XSS) in several features.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-21550 ‼

Windows Cryptographic Information Disclosure Vulnerability. This CVE ID is unique from CVE-2023-21540, CVE-2023-21559.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-21750 ‼

Windows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2023-21675, CVE-2023-21747, CVE-2023-21748, CVE-2023-21749, CVE-2023-21754, CVE-2023-21755, CVE-2023-21772, CVE-2023-21773, CVE-2023-21774.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-21757 ‼

Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-21527 ‼

Windows iSCSI Service Denial of Service Vulnerability.

📖 Read

via "National Vulnerability Database".
‼ CVE-2022-38491 ‼

An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. Part of the application does not implement protection against brute-force attacks.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-21676 ‼

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability.

📖 Read

via "National Vulnerability Database".
‼ CVE-2022-4338 ‼

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.

📖 Read

via "National Vulnerability Database".
‼ CVE-2022-4382 ‼

A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver was found. It could be triggered by yanking out a device that is running the gadgetfs side.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-21749 ‼

Windows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2023-21675, CVE-2023-21747, CVE-2023-21748, CVE-2023-21750, CVE-2023-21754, CVE-2023-21755, CVE-2023-21772, CVE-2023-21773, CVE-2023-21774.

📖 Read

via "National Vulnerability Database".
‼ CVE-2022-4379 ‼

A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allows an attacker to conduct a remote denial

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-21724 ‼

Microsoft DWM Core Library Elevation of Privilege Vulnerability.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-21537 ‼

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-21766 ‼

Windows Overlay Filter Information Disclosure Vulnerability.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-21768 ‼

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-21744 ‼

Microsoft SharePoint Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2023-21742.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-21552 ‼

Windows GDI Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2023-21532.

📖 Read

via "National Vulnerability Database".