Vulnerability Summary for the Week of January 31, 2022

Vulnerability Summary for the Week of January 31, 2022 02/07/2022 08:45 AM EST Original release date: February 7, 2022   High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source & Patch Info advantech — deviceon/iedge A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iEdge Server 1.0.2. A specially-crafted file can be replaced …

Vulnerability Summary for the Week of January 24, 2022

Vulnerability Summary for the Week of January 24, 2022 01/31/2022 10:21 AM EST Original release date: January 31, 2022   High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source & Patch Info apache — shenyu Groovy Code Injection & SpEL Injection which lead to Remote Code Execution. This issue affected Apache ShenYu 2.4.0 and …