CVE-2022-1162 A hardcoded password was set for accounts registered using an OmniAuth provider (e.g
allowing attackers to potentially take over accounts A hardcoded password was set for SSH keys in GitLab EE/CE versions prior to 14.7.7,
CVE-2022-0829 Improper Authorization in GitHub repository webmin/webmin prior to 1.990.
We have fixed the issue with this authorization type and we also added the support for other authorization types. We hope that from now on
CVE-2022-21968 Microsoft SharePoint Server Security Feature BypassVulnerability.
The issue is that Outlook Web Access (OWA) which is a feature that allows external users to access a SharePoint site via a web browser,
CVE-2022-23206 - Port Scanning Vulnerability in Apache Traffic Control Traffic Ops – Explained with Examples
Apache Traffic Control is a popular open-source Content Delivery Network (CDN) project, and its component, Traffic Ops, helps manage and monitor the CDN. In early
CVE-2022-21673 - How Misuse of Forward OAuth Identity in Grafana Exposed Sensitive Data
Grafana is a leading open-source platform, popular for monitoring and observability, powering dashboards used by engineers and companies worldwide. In early 2022, a serious vulnerability
Episode
00:00:00
00:00:00