June 13, 2023—KB5027223 (OS Build 22000.2057)

None For information about Windows update terminology, see the article about the [types of Windows updates]() and the [monthly quality update types](). For an overview of Windows 11, version 21H2, see ...

Continue Reading

CVSS3 - MEDIUM

CVSS2 - LOW

June 13, 2023—KB5027215 (OS Builds 19044.3086 and 19045.3086)

None **UPDATED 5/9/23 REMINDER **All editions of Windows 10, version 20H2 reached end of service on May 9, 2023. After May 9, 2023, these devices will not receive monthly security updates. These updat ...

Continue Reading

CVSS3 - MEDIUM

CVSS2 - LOW

CVE-2023-2801

A flaw was found in grafana. This issue occurs when sending an API call to the /ds/query or public dashboard query endpoint that has mixed queries, such as having two or more distinct data sources in ...

Continue Reading

CVSS3 - MEDIUM

CVSS2 - LOW

Important: c-ares security update

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API. Security Fix(es): * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067) For more ...

Continue Reading

CVSS3 - HIGH

CVSS2 - MEDIUM

Access Control Bypass

github.com/grafana/grafana is vulnerable to Access Control Bypass. The vulnerability exists due to a lack of write authorization checks in `authorization.go`, which allows an attacker with the viewer ...

Continue Reading

CVSS3 - MEDIUM

CVSS2 - MEDIUM

Denial Of Service (DoS)

github.com/grafana/grafana is vulnerable to Denial Of Service (DoS). The vulnerability exists due to executing concurrent mixed queries through the `executeConcurrentQueries` function of `query.go`, w ...

Continue Reading

CVSS3 - MEDIUM

CVSS2 - LOW

CVE-2017-12117

An exploitable improper authorization vulnerability exists in miner_start API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the re ...

Continue Reading

CVSS3 - HIGH

CVSS2 - MEDIUM

CVE-2017-12115

An exploitable improper authorization vulnerability exists in miner_setEtherbase API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to ...

Continue Reading

CVSS3 - HIGH

CVSS2 - MEDIUM

Back to Main

Subscribe for the latest news: