Java Spring Framework vulnerabilities [CVE-2022-22963 and CVE-2022-22965]
We are aware of two remote code execution vulnerabilities affecting the Java Spring Framework. The Spring Framework is an open
Read MoreSecurity Vulnerabilities
The latest Security Vulnerabilities
RCE vulnerability in Sophos Firewall (CVE-2022-1040)
An authentication bypass vulnerability allowing remote code execution was discovered in the User Portal and Webadmin of Sophos Firewall and
Read More
Multiple vulnerabilities in VMware Carbon Black App Control [CVE-2022-22951 and CVE-2022-22952]
CVE numbers – CVE-2022-22951 and CVE-2022-22952 Multiple vulnerabilities in VMware Carbon Black App Control were privately reported to VMware. Updates are available to remediate
Read More
Drupal core – Improper Input Validation in guzzlehttp/psr7 [CVE-2022-24775]
CVE number = CVE-2022-24775 Drupal uses the third-party Guzzle library for handling HTTP requests and responses to external services. Guzzle
Read More
Microsoft Office Visio Untrusted Pointer Dereference Remote Code Execution Vulnerability [CVE-2022-24509]
CVE number – CVE-2022-24509 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio.
Read More
MyBB Admin Control Panel Code Injection Remote Code Execution Vulnerability [CVE-2022-24734]
CVE number = CVE-2022-24734 This vulnerability allows remote attackers to execute arbitrary code on affected installations of MyBB. Authentication is
Read More
Linux Kernel Privilege Escalation Vulnerability – Dirty Pipe [CVE-2022-0847]
CVE number = CVE-2022-0847 A flaw has been found in the way the “flags” member of the new pipe buffer
Read More
Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities [CVE-2022-20754 and CVE-2022-20755]
CVE numbers – CVE-2022-20754 and CVE-2022-20755 Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and
Read MoreCisco IOS XE SD-WAN Software Command Injection Vulnerability [CVE-2021-1529]
CVE number – CVE-2021-1529 A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local
Read MoreCisco IOS XR Software Arbitrary File Read and Write Vulnerability [CVE-2021-34718]
CVE number = CVE-2021-34718 A vulnerability in the SSH Server process of Cisco IOS XR Software could allow an authenticated,
Read More