Aggregator

CVE-2021-40795 | Adobe Premiere Pro up to 15.4.2/22.0 out-of-bounds (apsb21-117 / Nessus ID 209473)

Vuldb Updates
10 months 4 weeks ago
A vulnerability was found in Adobe Premiere Pro up to 15.4.2/22.0. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to out-of-bounds read. This vulnerability is handled as CVE-2021-40795. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2021-43027 | Adobe After Effects up to 18.4.2/22.0 out-of-bounds (apsb21-115 / Nessus ID 209379)

Vuldb Updates
10 months 4 weeks ago
A vulnerability classified as critical has been found in Adobe After Effects up to 18.4.2/22.0. This affects an unknown part. The manipulation leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2021-43027. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2021-44188 | Adobe After Effects up to 18.4.2/22.0 out-of-bounds (apsb21-115 / Nessus ID 209379)

Vuldb Updates
10 months 4 weeks ago
A vulnerability, which was classified as critical, has been found in Adobe After Effects up to 18.4.2/22.0. This issue affects some unknown processing. The manipulation leads to out-of-bounds read. The identification of this vulnerability is CVE-2021-44188. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2023-41061 | Apple iOS/iPadOS up to 16.6 Attachment BLASTPASS behavioral workflow (HT213905)

Vuldb Updates
10 months 4 weeks ago
A vulnerability, which was classified as critical, was found in Apple iOS and iPadOS up to 16.6. This affects an unknown part of the component Attachment Handler. The manipulation leads to enforcement of behavioral workflow. This vulnerability is uniquely identified as CVE-2023-41061. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2023-41061 | Apple watchOS Attachment behavioral workflow

Vuldb Updates
10 months 4 weeks ago
A vulnerability has been found in Apple watchOS and classified as critical. This vulnerability affects unknown code of the component Attachment Handler. The manipulation leads to enforcement of behavioral workflow. This vulnerability was named CVE-2023-41061. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

直播预告：AI大模型赋能邮件智能应用与安全防护

嘶吼
10 months 4 weeks ago

速速锁定4月25日15：00

立即扫码预约：免费试用15天+千元好礼 +解决方案，收获多重好礼！

当大模型开启邮件安全新范式，AI如何让每封邮件及邮件安全防线都自带“智慧基因”？

直播亮点抢先看：

邮件系统大模型对接模块

- 大模型对接模块方案解读与核心场景演示

- 大模型在邮箱中的未来展望

大模型邮件安全网关

- 三大AI防护能力深度解读

- 一次性掌握网关选型逻辑

快来直播间，获取AI大模型在邮件智能应用与安全防护干货内容~

Coremail邮件安全

CSI announces two AI-powered AML compliance and fraud detection solutions

Help Net Security
10 months 4 weeks ago

CSI launched its AI-powered AML compliance and fraud detection solutions: TruDetect and TruProtect. The solutions are powered by DATASEERS, a data-driven B2B SaaS company specialized in harnessing data, automating manual processes and providing real-time insight for risk, fraud, compliance and operations. According to Celent, over 95% of AML alerts are false positives, leading to wasted time and inefficiency in investigations. AML analysts can also spend between 30 and 70 minutes per alert, according to a … More →

The post CSI announces two AI-powered AML compliance and fraud detection solutions appeared first on Help Net Security.

Industry News

CVE-2022-31698 | VMware vCenter Server/Cloud Foundation Content Library Service denial of service (VMSA-2022-0030)

Vuldb Updates
10 months 4 weeks ago
A vulnerability has been found in VMware vCenter Server and Cloud Foundation and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Content Library Service. The manipulation leads to denial of service. This vulnerability is known as CVE-2022-31698. The attack can be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2022-44636 | Samsung TV 2021/2022 Bluetooth access control

Vuldb Updates
10 months 4 weeks ago
A vulnerability was found in Samsung TV 2021/2022. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Bluetooth Handler. The manipulation leads to improper access controls. This vulnerability is known as CVE-2022-44636. The attack can be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2022-45685 | Jettison up to 1.5.1 JSON Data stack-based overflow (Issue 54)

Vuldb Updates
10 months 4 weeks ago
A vulnerability, which was classified as problematic, has been found in Jettison up to 1.5.1. Affected by this issue is some unknown functionality of the component JSON Data Handler. The manipulation leads to stack-based buffer overflow. This vulnerability is handled as CVE-2022-45685. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-45685 | Oracle WebLogic Server 12.2.1.3.0/12.2.1.4.0/14.1.1.0.0 Third Party denial of service

Vuldb Updates
10 months 4 weeks ago
A vulnerability, which was classified as critical, was found in Oracle WebLogic Server 12.2.1.3.0/12.2.1.4.0/14.1.1.0.0. This affects an unknown part of the component Third Party. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2022-45685. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

CVE-2022-45685 | Oracle PeopleSoft Enterprise PeopleTools 8.58/8.59/8.60 Security denial of service

Vuldb Updates
10 months 4 weeks ago
A vulnerability has been found in Oracle PeopleSoft Enterprise PeopleTools 8.58/8.59/8.60 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Security. The manipulation leads to denial of service. This vulnerability is known as CVE-2022-45685. The attack can be launched remotely. There is no exploit available.
vuldb.com

CVE-2022-46364 | Oracle Banking Origination 14.5/14.6/14.7 Onboarding Batch Processes server-side request forgery (Nessus ID 211909)

Vuldb Updates
10 months 4 weeks ago
A vulnerability was found in Oracle Banking Origination 14.5/14.6/14.7 and classified as very critical. Affected by this issue is some unknown functionality of the component Onboarding Batch Processes. The manipulation leads to server-side request forgery. This vulnerability is handled as CVE-2022-46364. The attack may be launched remotely. There is no exploit available.
vuldb.com

CVE-2022-46364 | Oracle Banking Supply Chain Finance 14.7.0.2.0/14.7.1.0.0 Security server-side request forgery (Nessus ID 211909)

Vuldb Updates
10 months 4 weeks ago
A vulnerability was found in Oracle Banking Supply Chain Finance 14.7.0.2.0/14.7.1.0.0. It has been declared as very critical. This vulnerability affects unknown code of the component Security. The manipulation leads to server-side request forgery. This vulnerability was named CVE-2022-46364. The attack can be initiated remotely. There is no exploit available.
vuldb.com

CVE-2022-46364 | Oracle Banking Trade Finance Process Management 14.5.0.8.0/14.6.0.4.0/14.7.0.2.0/14.7.1.0.0 Dashboard server-side request forgery (Nessus ID 211909)

Vuldb Updates
10 months 4 weeks ago
A vulnerability classified as very critical was found in Oracle Banking Trade Finance Process Management 14.5.0.8.0/14.6.0.4.0/14.7.0.2.0/14.7.1.0.0. Affected by this vulnerability is an unknown functionality of the component Dashboard. The manipulation leads to server-side request forgery. This vulnerability is known as CVE-2022-46364. The attack can be launched remotely. There is no exploit available.
vuldb.com

欧盟表示不管企业位于何处都会执行数字市场法

Solidot
10 months 4 weeks ago
欧盟委员会主席 Ursula von der Leyen 表示，无论谁执掌 X、Meta、苹果和 TikTok 等公司，无论这些公司位于何处，欧盟都决心全面执行其数字市场法规。他说，这就是我们对 TikTok、X、苹果、Meta 等公司提起诉讼的原因。我们公平、合理、公正地应用规则。我们不关心公司来自哪里，也不关心谁在运营。我们关心的是保护人民。

Managed ad