Security Vulnerabilities

The latest Security Vulnerabilities

NewsSecurity Vulnerabilities

Anker Eufy Homebase 2 mips_collector appsrv_server use-after-free vulnerability [CVE-2022-21806]

Duncan 2988 Views 0 Comments ,  ,  0 min read

CVE number = CVE-2022-21806 A use-after-free vulnerability exists in the mips_collector appsrv_server functionality of Anker Eufy Homebase 2 2.1.8.5h. A

Read More
NewsSecurity Vulnerabilities

Apache HTTPD Server ap_escape_html2 Integer Overflow Remote Code Execution Vulnerability [CVE-2022-22721]

Luke Simmonds 3547 Views 0 Comments ,  ,  ,  ,  0 min read

CVE number – CVE-2022-22721 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apache HTTPD Server.

Read More
NewsSecurity Vulnerabilities

(Pwn2Own) Prosys OPC UA SDK for Java OPC UA Messages Resource Exhaustion Denial-of-Service Vulnerability [CVE-2022-30551]

Jason Davies 3075 Views 0 Comments ,  ,  0 min read

CVE number = CVE-2022-30551 This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Prosys OPC

Read More
NewsSecurity Vulnerabilities

Cisco FirePOWER Software for ASA FirePOWER Module Command Injection Vulnerability [CVE-2022-20828]

Jason Davies 3478 Views 0 Comments ,  ,  ,  ,  2 min read

CVE number – CVE-2022-20828 A vulnerability in the CLI parser of Cisco FirePOWER Software for Adaptive Security Appliance (ASA) FirePOWER

Read More
NewsSecurity Vulnerabilities

Cisco Enterprise Chat and Email Stored Cross-Site Scripting Vulnerability [CVE-2022-20802]

Luke Simmonds 2701 Views 0 Comments ,  ,  ,  0 min read

CVE number – CVE-2022-20802 A vulnerability in the web interface of Cisco Enterprise Chat and Email (ECE) could allow an

Read More
NewsSecurity Vulnerabilities

Spring Framework remote code execution [CVE-2022-22965]

Jason Davies 2642 Views 0 Comments ,  ,  ,  0 min read

CVE number = CVE-2022-22965 Spring Framework could allow a remote attacker to execute arbitrary code on the system, caused by

Read More
NewsSecurity Vulnerabilities

Microsoft Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability [CVE-2022-30149]

Luke Simmonds 3176 Views 0 Comments ,  ,  ,  0 min read

CVE number – CVE-2022-30149 Microsoft Windows could allow a remote attacker to execute arbitrary code on the system, caused by

Read More
NewsSecurity Vulnerabilities

Drupal Out-of-band security update addresses two vulnerabilities in the third-party library Guzzle [CVE-2022-31042 and CVE-2022-31043]

Duncan 3359 Views 0 Comments ,  ,  ,  ,  1 min read

CVE numbers = CVE-2022-31042 and CVE-2022-31043 Drupal uses the third-party Guzzle library for handling HTTP requests and responses to external

Read More
NewsSecurity Vulnerabilities

Microsoft Word glTF-SDK Integer Overflow Remote Code Execution Vulnerability [CVE-2021-43875]

Jason Davies 3081 Views 0 Comments ,  ,  ,  0 min read

CVE number – CVE-2021-43875 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Word. User

Read More
NewsSecurity Vulnerabilities

Cisco RV340 JSON RPC set-snmp Stack-based Buffer Overflow Remote Code Execution Vulnerability [CVE-2022-20753]

Jason Davies 3183 Views 0 Comments ,  ,  ,  ,  0 min read

CVE number – CVE-2022-20753 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Cisco RV340 routers.

Read More