Month: October 2022

Microsoft Windows Point-to-Point Tunneling Protocol code execution | CVE-2022-30198

October 12, 2022

NAME Microsoft Windows Point-to-Point Tunneling Protocol code execution Platforms Affected:Microsoft Windows 7 SP1 x32 Microsoft Windows 7 SP1 x64 Microsoft...

SAP Commerce security bypass | CVE-2022-41204

October 12, 2022

NAME SAP Commerce security bypass Platforms Affected:SAP Commerce 1905 SAP Commerce 2005 SAP Commerce 2011 SAP Commerce 2105 SAP Commerce...

Google Chrome Skia code execution | CVE-2022-3445

October 12, 2022

NAME Google Chrome Skia code execution Platforms Affected:Google Chrome 106.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Google Chrome could allow a remote attacker...

Google Chrome Safe Browsing code execution | CVE-2022-3449

October 12, 2022

NAME Google Chrome Safe Browsing code execution Platforms Affected:Google Chrome 106.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Google Chrome could allow a remote...

SVMPC1 and SVMPC2 information disclosure | CVE-2022-41653

October 12, 2022

NAME SVMPC1 and SVMPC2 information disclosure Platforms Affected:Daikin SVMPC1 2.1.22 Daikin SVMPC2 1.2.3Risk Level:9.8Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION SVMPC1 and SVMPC2 could...

Microsoft Windows Point-to-Point Tunneling Protocol code execution | CVE-2022-41081

October 12, 2022

NAME Microsoft Windows Point-to-Point Tunneling Protocol code execution Platforms Affected:Microsoft Windows 7 SP1 x32 Microsoft Windows 7 SP1 x64 Microsoft...

Microsoft Windows Active Directory Certificate Services privilege escalation | CVE-2022-37976

October 12, 2022

NAME Microsoft Windows Active Directory Certificate Services privilege escalation Platforms Affected:Microsoft Windows Server 2008 SP2 x64 Microsoft Windows Server 2008...

Microsoft Windows RAS Point-to-Point Tunneling Protocol code execution | CVE-2022-22035

October 12, 2022

NAME Microsoft Windows RAS Point-to-Point Tunneling Protocol code execution Platforms Affected:Microsoft Windows 7 SP1 x32 Microsoft Windows 7 SP1 x64...

Google Chrome WebSQL buffer overflow | CVE-2022-3446

October 12, 2022

NAME Google Chrome WebSQL buffer overflow Platforms Affected:Google Chrome 106.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Google Chrome is vulnerable to a heap-based...

Google Chrome Peer Connection code execution | CVE-2022-3450

October 12, 2022

NAME Google Chrome Peer Connection code execution Platforms Affected:Google Chrome 106.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Google Chrome could allow a remote...

VMware has yet to fix CVE-2021-22048 flaw in vCenter Server disclosed one year ago

October 12, 2022

VMware has yet to address the CVE-2021-22048 privilege escalation vulnerability in vCenter Server disclosed in November 2021. VMware warns customers...

Daily Vulnerability Trends: Wed Oct 12 2022

October 12, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-42724 No description provided CVE-2022-0847A flaw was found in the way the...

LockBit affiliates compromise Microsoft Exchange servers to deploy ransomware

October 12, 2022

Lockbit ransomware affiliates are compromising Microsoft Exchange servers to deploy their ransomware, experts warn. South-Korean cybersecurity firm AhnLab reported that...