CVE-2022-21630 Vulnerability in Oracle JD Edwards tools product 9.2.6.4 and earlier.
Due to the risk of exploitation, publishing detailed information of this vulnerability is not recommended. However, the Common Vulnerabilities and Exposures project has assigned this
CVE-2022-39198 Vulnerability in deserialization of dubbo hessian-lite could lead to malicious code execution.
Dubbo Hessian-Lite is a lightweight data integration component. It’s used in scenarios where data needs to be transferred within a single organization between applications
CVE-2022-41547 The MobSF v0.9.2 and below had a LFI vulnerability in the StaticAnalyzer/views.py script.
Exploiting this vulnerability could allow a remote attacker to read arbitrary files on the targeted system. We have updated MobSF to version 0.9.3
CVE-2022-22226 An Uncontrolled Memory Allocation vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated adjacently located attacker sending specific packets to crash the PFE.
18.4 versions prior to 18.4R2-S6, 18.4R3-S6; 19.2 versions prior to 19.2R1-S6, 19.2R2-S6, 19.2R3-S6; 20.1 versions prior to
CVE-2022-22229 An XSS vulnerability in the Control Center Controller pages of Juniper Networks Paragon Active Assurance allows for persistent attacks.
This vulnerability can be exploited remotely by a low skill level attacker without much knowledge or experience in web development. An attacker can exploit this
Episode
00:00:00
00:00:00