CVE-2022-0030 : PALO ALTO PAN-OS UP TO 8.1.23 WEB INTERFACE AUTHENTICATION SPOOFING
Description An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific
CVE-2022-42717 : HASHICORP PACKER UP TO 2.3.0 SUDO PRIVILEGE ESCALATION
Description An issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration for Vagrant on Linux is insecure.
CVE-2022-36063 : AZURE RTOS USBX PRIOR 6.1.12 _UX_HOST_CLASS_CDC_ECM_MAC_ADDRESS_GET INTEGER UNDERFLOW
Description Azure RTOS USBx is a USB host, device, and on-the-go (OTG) embedded stack, fully integrated with Azure RTOS ThreadX
CVE-2022-40684 : FORTINET FORTIOS/FORTIPROXY ADMINISTRATIVE INTERFACE IMPROPER AUTHORIZATION
Description A vulnerability was found in Fortinet FortiOS and FortiProxy. It has been classified as very critical. This affects an
CVE-2022-39959 : PANINI EVEREST ENGINE 2.0.4 EVEREST.EXE UNTRUSTED SEARCH PATH
Description Panini Everest Engine 2.0.4 allows unprivileged users to create a file named Everest.exe in the %PROGRAMDATA%\Panini folder. This leads
CVE-2022-42457 : GENEREX CS141 PRIOR 2.08 WEB INTERFACE GXSERVE-UPDATE.SH RUN_UPDATE PRIVILEGE ESCALATION
Description Generex CS141 before 2.08 allows remote command execution by administrators via a web interface that reaches run_update in /usr/bin/gxserve-update.sh
CVE-2022-36961 : SOLARWINDS ORION PLATFORM VERB SQL INJECTION
Description A vulnerable component of Orion Platform was vulnerable to SQL Injection, an authenticated attacker could leverage this for privilege
CVE-2022-42302 : VERITAS NETBACKUP UP TO 10.0 NBFSMCLIENT SERVICE SQL INJECTION
Description An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable
CVE-2022-39266 : ISOLATED-VM UP TO 4.3.6 API PROTECTION MECHANISM
Description isolated-vm is a library for nodejs which gives the user access to v8’s Isolate interface. In versions 4.3.6 and
CVE-2022-34424 : DELL OS10 10.5.1.X/10.5.2.X/10.5.3.X OUT-OF-BOUNDS WRITE
Description Networking OS10, versions 10.5.1.x, 10.5.2.x, and 10.5.3.x contain a vulnerability that could allow an attacker to cause a system
CVE-2022-41604 : CHECK POINT ZONEALARM EXTREME SECURITY PRIOR 15.8.211.19229 UPDATES PERMISSION
Description Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. This occurs because of weak permissions
CVE-2022-39243 : NUPROCESS UP TO 2.0.4 COMMAND LINE ARGUMENT JAVA_JAVA_LANG_UNIXPROCESS_FORKANDEXEC COMMAND INJECTION
Description NuProcess is an external process execution implementation for Java. In all the versions of NuProcess where it forks processes
CVE-2022-2025 : GRANDSTREAM GSD3710 1.0.11.13 STRCOPY STACK-BASED OVERFLOW
Description An attacker with knowledge of user/pass of Grandstream GSD3710 in its 1.0.11.13 version, could overflow the stack since it
CVE-2022-2315 : DATABASE SOFTWARE PRIOR 2 ACCREDITATION TRACKING/PRESENTATION SQL INJECTION
Description Database Software Accreditation Tracking/Presentation Module product before version 2 has an unauthenticated SQL Injection vulnerability. This is fixed in
CVE-2022-37877 : ARUBA CLEARPASS POLICY MANAGER UP TO 6.9.11/6.10.6 ON MACOS ONGUARD AGENT PRIVILEGE ESCALATION
Description A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their
CVE-2022-23768 : NEO INFORMATION SYSTEMS NIS-HAP11AC PRIOR 4.2-B20220530142945 TELNET SERVICE ACCESS CONTROL
Description This Vulnerability in NIS-HAP11AC is caused by an exposed external port for the telnet service. Remote attackers use this
How Content Security Policy (CSP) Secures Web Clients?
What is Content Security Policy (CSP)? Content Security Policy (CSP) is an additional layer of security on the HTTP browser
CVE-2022-28758 : ZOOM ON-PREMISE MEETING CONNECTOR MMR PRIOR 4.8.20220815.130 ACCESS CONTROL
Description Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious
CVE-2022-2977 : LINUX KERNEL TPM DEVICE USE AFTER FREE
Description A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized
CVE-2022-37703 : AMANDA 3.5.1 CALCSIZE OPENDIR PRIVILEGES MANAGEMENT
Description In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary. An attacker can abuse this
What Is A Supply Chain Attack? How To Prevent Them?
What is a Supply Chain Attack? The supply chain includes everything from the delivery of materials from suppliers to manufacturers
CVE-2022-31226 : DELL BIOS STACK-BASED OVERFLOW
Description Dell BIOS versions contain a Stack-based Buffer Overflow vulnerability. A local authenticated malicious user could potentially exploit this vulnerability
CVE-2022-39135 : APACHE CALCITE UP TO 1.31.X XML EXTERNAL ENTITY REFERENCE
Description In Apache Calcite prior to version 1.32.0 the SQL operators EXISTS_NODE, EXTRACT_XML, XML_TRANSFORM and EXTRACT_VALUE do not restrict XML
CVE-2022-36642 : TELOS ALLIANCE OMNIA MPX NODE UP TO 1.5.0+R1 /APPCONFIG/USERDB.JSON ACCESS CONTROL
Description A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to access