Wordfence Intelligence CE Weekly Vulnerability Report (Feb 6, 2023 to Feb 12, 2023)

In case you missed it, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as [Wordfence Intelligence Community Edit ...

Continue Reading

CVSS3 - HIGH

Description of the security update for SharePoint Enterprise Server 2016 Language Pack: February 14, 2023 (KB5002325)

None ## Summary This security update resolves a Microsoft SharePoint Server elevation of privilege vulnerability and Microsoft Word remote code execution vulnerability. To learn more about the vulnera ...

Continue Reading

CVSS3 - CRITICAL

Description of the security update for SharePoint Enterprise Server 2016: February 14, 2023 (KB5002350)

None ## Summary This security update resolves a Microsoft SharePoint Server elevation of privilege vulnerability. To learn more about the vulnerability, see ​​​​​​​[ ...

Continue Reading

CVSS3 - HIGH

Description of the security update for SharePoint Server Subscription Edition: February 14, 2023 (KB5002353)

None ## Summary This security update resolves a Microsoft SharePoint Server elevation of privilege vulnerability and Microsoft Word remote code execution vulnerability. To learn more about the vulnera ...

Continue Reading

CVSS3 - CRITICAL

Description of the security update for SharePoint Server 2019: February 14, 2023 (KB5002342)

None ## Summary This security update resolves a Microsoft SharePoint Server elevation of privilege vulnerability and Microsoft Word remote code execution vulnerability. To learn more about the vulnera ...

Continue Reading

CVSS3 - CRITICAL

Security Bulletin: WebSphere Application Server Liberty is vulnerable to server-side request forgery due to Apache CXF

## Summary This security bulletin addresses the vulnerabilitiy in Open Source Apache CXF that affect IBM Tivoli Application Dependency Discovery Manager (CVE-2022-46364). IBM Tivoli Application Depend ...

Continue Reading

CVSS3 - CRITICAL

Security Bulletin: WebSphere Application Server Liberty is vulnerable to server-side request forgery due to Apache CXF

## Summary This security bulletin addresses the vulnerabilitiy in Open Source Apache CXF that affect IBM Tivoli Application Dependency Discovery Manager (CVE-2022-46364). IBM Tivoli Application Depend ...

Continue Reading

CVSS3 - CRITICAL

GitLab GitHub Repo Import Deserialization Remote Code Execution Exploit

An authenticated user can import a repository from GitHub into GitLab. If a user attempts to import a repo from an attacker-controlled server, the server will reply with a Redis serialization protocol ...

Continue Reading

CVSS3 - CRITICAL

Back to Main

Subscribe for the latest news: