Vulnerability Summary for the Week of October 23, 2023

Vulnerability Summary for the Week of October 23, 2023 10/30/2023 06:38 AM EDT The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. NVD is sponsored by CISA. In some cases, the vulnerabilities in the bulletin may not …

Vulnerability Summary for the Week of September 18, 2023

Vulnerability Summary for the Week of September 18, 2023 09/29/2023 12:00 PM EDT The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. NVD is sponsored by CISA. In some cases, the vulnerabilities in the bulletin may not …

Vulnerability Summary for the Week of August 21, 2023

Vulnerability Summary for the Week of August 21, 2023 08/28/2023 04:30 PM EDT The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. NVD is sponsored by CISA. In some cases, the vulnerabilities in the bulletin may not …

Vulnerability Summary for the Week of May 16, 2022

Vulnerability Summary for the Week of May 16, 2022 05/24/2022 06:37 AM EDT Original release date: May 24, 2022   High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source & Patch Info There were no high vulnerabilities recorded this week. Back to top   Medium Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source …

Vulnerability Summary for the Week of February 14, 2022

Vulnerability Summary for the Week of February 14, 2022 02/21/2022 09:20 AM EST Original release date: February 21, 2022   High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source & Patch Info accel-ppp — accel-ppp The rad_packet_recv function in opt/src/accel-pppd/radius/packet.c suffers from a buffer overflow vulnerability, whereby user input len is copied into a …

Vulnerability Summary for the Week of January 10, 2022

Vulnerability Summary for the Week of January 10, 2022 01/17/2022 09:23 AM EST Original release date: January 17, 2022   High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source & Patch Info agoric — realms-shim All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attack vector. 2022-01-10 7.5 CVE-2021-23543MISCMISC …

Vulnerability Summary for the Week of October 25, 2021

Vulnerability Summary for the Week of October 25, 2021 11/01/2021 06:47 AM EDT Original release date: November 1, 2021   High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source & Patch Info apache — storm An Unsafe Deserialization vulnerability exists in the worker services of the Apache Storm supervisor server allowing pre-auth Remote Code …

Vulnerability Summary for the Week of September 13, 2021

Vulnerability Summary for the Week of September 13, 2021 09/20/2021 06:58 AM EDT Original release date: September 20, 2021   High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source & Patch Info zohocorp — manageengine_adselfservice_plus Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to SQL Injection while linking the databases. 2021-09-10 7.5 CVE-2021-37422MISC …