Microsoft - CVE CyberSecurity Database News (Page 310)

Nov 1, 2022 XXE Microsoft SQL

CVE-2022-43353 The system was found to have a SQL injection vulnerability. The id parameter was vulnerable.

Reportedly, if an attacker sends a request with an arbitrary id value, they can execute SQL commands to get administrator privileges. With this flaw, an

Oct 31, 2022 Windows Microsoft

CVE-2021-27784 The HCL Launch Container images contain non-unique HTTPS keys and certificates. The fix provides tools to replace them.

The only change made to the standard application packages is that they now include the SSL inspection fix. This fix will have no impact on

Oct 27, 2022 Microsoft Exploit ForgeRock Access Management

CVE-2022-24670 - Unrestricted LDAP Queries Leak Configuration Entries—How It Works, Details, and Exploit Example

CVE-2022-24670 is a critical vulnerability that affects Microsoft’s Exchange Server, specifically its handling of LDAP queries. If you’re running Exchange or administer services

CVE-2022-39364 - How a Simple Log Leak in Nextcloud Exposed SharePoint Credentials

Oct 27, 2022 Microsoft PHP nextcloud security-advisories

CVE-2022-39364 - How a Simple Log Leak in Nextcloud Exposed SharePoint Credentials

Nextcloud Server is a powerful open-source, self-hosted platform trusted by many for file sharing, productivity, and collaboration. But like all software, it's not

Oct 25, 2022 Microsoft WordPress PHP Post to CSV by BestWebSoft

CVE-2022-3393 - CSV Injection Vulnerability in Post to CSV by BestWebSoft WordPress Plugin (<= 1.4.) – Detailed Analysis and Exploit Guide

--- Introduction In this post, we’ll dive deep into CVE-2022-3393, a critical security issue affecting the popular WordPress plugin Post to CSV by BestWebSoft.