Month: September 2022

CVE-2022-35248

1 min read

• Government Security News

CVE-2022-35248

admin September 26, 2022

A improper authentication vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 that allowed two factor authentication can...

Read More

CVE-2022-35249

1 min read

• Government Security News

CVE-2022-35249

admin September 26, 2022

A information disclosure vulnerability exists in Rocket.Chat <v5 where the getUserMentionsByChannel meteor server method discloses messages from...

Read More

CVE-2022-35250

1 min read

• Government Security News

CVE-2022-35250

admin September 26, 2022

A privilege escalation vulnerability exists in Rocket.chat <v5 which made it possible to elevate privileges for any...

Read More

CVE-2022-35251

1 min read

• Government Security News

CVE-2022-35251

admin September 26, 2022

A cross-site scripting vulnerability exists in Rocket.chat <v5 due to style injection in the complete chat window,...

Read More

CVE-2022-35252

1 min read

• Government Security News

CVE-2022-35252

admin September 26, 2022

When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control...

Read More

CVE-2022-35253

1 min read

• Government Security News

CVE-2022-35253

admin September 26, 2022

A vulnerability exists in Hyperledger Fabric <2.4 could allow an attacker to construct a non-validated request that...

Read More

CVE-2022-35257

1 min read

• Government Security News

CVE-2022-35257

admin September 26, 2022

A local privilege escalation vulnerability in UI Desktop for Windows (Version 0.55.1.2 and earlier) allows a malicious...

Read More

CVE-2022-35408 (insydeh2o)

1 min read

• Government Security News

CVE-2022-35408 (insydeh2o)

admin September 26, 2022

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in...

Read More

CVE-2022-35621

1 min read

• Government Security News

CVE-2022-35621

admin September 26, 2022

Access control vulnerability in Evoh NFT EvohClaimable contract with sha256 hash code fa2084d5abca91a62ed1d2f1cad3ec318e6a9a2d7f1510a00d898737b05f48ae allows remote attackers to...

Read More

CVE-2022-35721

1 min read

• Government Security News

CVE-2022-35721

admin September 26, 2022

IBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to...

Read More