Description of the security update for SharePoint Server Subscription Edition: October 11, 2022 (KB5002290)

None ## Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability. To learn more about the vulnerability, see the following security advisories: * [Mic ...

Continue Reading

CVSS3 - HIGH

ZoneMinder Information Disclosure Vulnerability

ZoneMinder is an open source video surveillance software system. The system supports IP, USB, and analog cameras, etc. ZoneMinder is vulnerable to an information disclosure vulnerability that stems fr ...

Continue Reading

CVSS3 - HIGH

IBM Robotic Process Automation Access Control Error Vulnerability (CNVD-2022-68277)

IBM Robotic Process Automation is a robotic process automation product from International Business Machines (IBM), Inc. It can help you automate more business and IT processes at scale with the ease a ...

Continue Reading

CVSS3 - MEDIUM

Improper Authorization

apache_airflow is vulnerable to improper authorization. A deactivated user is able to continue using the UI or the API with an already authenticated session due to the insufficient checks in `create_a ...

Continue Reading

CVSS3 - HIGH

gnutls and nettle security, bug fix, and enhancement update

gnutls [3.7.6-12] - fips: mark PBKDF2 with short key and output sizes non-approved - fips: only mark HMAC as approved in PBKDF2 - fips: mark gnutls_key_generate with short key sizes non-approved - fip ...

Continue Reading

CVSS3 - HIGH

CVE-2022-24504

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22035, CVE-2022-30198, CVE-2022-33634, CVE-2022-38000, CVE-2022-38047, CVE-2022-41081 ...

Continue Reading

CVSS3 - HIGH

CVE-2022-22035

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24504, CVE-2022-30198, CVE-2022-33634, CVE-2022-38000, CVE-2022-38047, CVE-2022-41081 ...

Continue Reading

CVSS3 - HIGH

CVE-2022-37968

Azure Arc-enabled Kubernetes cluster Connect Elevation of Privilege Vulnerability.Read More ...

Continue Reading

CVSS3 - CRITICAL

Back to Main

Subscribe for the latest news: