By michele654 on Friday, 01 July 2022
Category: Vulnerabilities

New Vulnerabilities Friday 01 July


New Alerts for Exemys, GitLab, IBM, Tenable, Microsoft Edge, and Dell.

Exemys 

Exemys RME1 contains an Improper Authentication vulnerability that allows a remote attacker to use a specific credential string to bypass authentication on the web interface and perform administrative operations. CVSSv3 score of 9.8
This module is EOL and will not be patched.
More info.

GitLab 

GitLab has released Critical security fixes, allowing a remote attacker to disclose information, bypass security settings, cause a DoS, and execute code. Highest CVSSv3 score of 10.
More info. And here.

IBM 

PostgreSQL could allow a remote attacker to gain unauthorized access to the system which may affect IBM Spectrum Protect Plus. CVSSv3 score of 9.8
More info.

Tenable 

Tenable.sc includes Apache as third-party software and has been updated with the latest Apache fixes. Highest CVSSv3 score of 9.8
More info.

Microsoft 

Microsoft has patched a vulnerability in Edge. CVSSv3 score of 8.3
More info.

Dell 

Dell PowerScale OneFS contains an unprotected primary channel. A remote attacker can cause a denial of filesystem services. CVSSv3 score of 5.3
More info.

Security Wizardry Cyber Threat Intelligence - The Radar Page

Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page

SecurityWizardry.com - Vulnerability Details

Leave Comments