A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.
// weekly digest
Loading…
Loading…
// weekly digest
// weekly digest
2022-01-10 00:00 UTC 2022-01-16 23:59 UTC
// total
0
// critical
0
// high
0
// medium
0
// low
0
// new kev
15
// top critical
No CRITICAL CVEs published this week.
// top high
No HIGH CVEs published this week.
// new kev additions
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.
Kibana contain an arbitrary code execution flaw in the Timelion visualizer.
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization.
Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled.
Primetek Primefaces is vulnerable to a weak encryption flaw resulting in remote code execution
Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands
A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software allows a remote, unauthenticated attacker to upload a file to any location on the filesystem.
A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users.
Synacor Zimbra Collaboration Suite (ZCS) contains an improper restriction of XML external entity (XXE) vulnerability in the mailboxd component.