Aggregator

A vulnerability was found in EXEMSI MSI Wrapper and classified as problematic. Affected is an unknown function. Executing a manipulation can lead to improper privilege management. This vulnerability is tracked as CVE-2021-32415. The attack is restricted to local execution. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability was found in Ruckus Wireless SmartZone Controller. It has been rated as problematic. Affected by this vulnerability is an unknown functionality of the component eAut Module. This manipulation causes denial of service. This vulnerability is handled as CVE-2021-36630. The attack can be initiated remotely. There is not any exploit available.

A vulnerability labeled as problematic has been found in Orchard CMS 1.10.3. Affected is an unknown function of the component Blog Post Handler. Executing a manipulation can lead to cross site scripting. This vulnerability appears as CVE-2022-37720. The attack may be performed from remote. There is no available exploit.

Compare leading and best email security solutions with AI threat detection, phishing defense, malware blocking, and DLP features for teams.

A vulnerability was found in SUSE Manager Server 4.1/4.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component spacewalk-java. The manipulation results in resource consumption. This vulnerability was named CVE-2022-21952. The attack may be performed from remote. There is no available exploit. Applying a patch is advised to resolve this issue.

A vulnerability identified as critical has been detected in Super Flexible Software Syncovery 9 up to 9.47x on Linux. The impacted element is an unknown function of the file post_profilesettings.php. The manipulation of the argument Job_ExecuteBefore/Job_ExecuteAfter leads to command injection. This vulnerability is documented as CVE-2022-36534. The attack can be initiated remotely. There is not any exploit available.

A vulnerability labeled as critical has been found in Super Flexible Software Syncovery 9 up to 9.47x on Linux. This affects an unknown function of the file post_applogin.php of the component Session Token Handler. The manipulation results in improper access controls. This vulnerability is reported as CVE-2022-36536. The attack can be launched remotely. No exploit exists.

A vulnerability described as problematic has been identified in Super Flexible Software Syncovery 9 up to 9.47x on Linux. Affected is an unknown function. Such manipulation leads to cross site scripting. This vulnerability is traded as CVE-2022-36533. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in SmartVista SVFE2 2.2.22. This affects an unknown part of the file /SVFE2/pages/audit/voiceaudit.jsf. This manipulation of the argument voiceAudit:j_id97 causes sql injection. This vulnerability is registered as CVE-2022-38617. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability labeled as critical has been found in SmartVista SVFE2 2.2.22. The affected element is an unknown function of the file /SVFE2/pages/feegroups/country_group.jsf. Such manipulation of the argument UserForm:j_id88/UserForm:j_id90/UserForm:j_id92 leads to sql injection. This vulnerability is uniquely identified as CVE-2022-38618. The attack can be launched remotely. No exploit exists.

A vulnerability marked as critical has been reported in SmartVista SVFE2 2.2.22. Affected by this issue is some unknown functionality of the file /SVFE2/pages/feegroups/mcc_group.jsf. Performing a manipulation of the argument UserForm:j_id90 results in sql injection. This vulnerability is cataloged as CVE-2022-38619. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Acer Altos T110 F3, AP130 F2, Aspire 1600X, Aspire 1602M, Aspire 7600U, Aspire MC605, Aspire TC-105, Aspire TC-120, Aspire U5-620, Aspire X1935, Aspire X3475, Aspire X3995, Aspire XC100, Aspire XC600, Aspire Z3-615, Veriton E430G, Veriton B630_49, Veriton E430 and Veriton M2110G and classified as critical. Impacted is an unknown function of the component UEFI DXE Driver. The manipulation results in stack-based buffer overflow. This vulnerability is identified as CVE-2022-30426. The attack can only be performed from the local network. There is not any exploit available.

A vulnerability was found in Bus Pass Management System 1.0. It has been classified as problematic. Impacted is an unknown function. This manipulation of the argument searchdata causes cross site scripting. This vulnerability is handled as CVE-2022-35155. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability was found in Bus Pass Management System 1.0. It has been declared as critical. This impacts an unknown function of the file /buspassms/download-pass.php. Executing a manipulation of the argument searchdata can lead to sql injection. This vulnerability is handled as CVE-2022-35156. The attack can be executed remotely. There is not any exploit available.

Настройка «доверяй всем» чуть не подставила тысячи разработчиков.

空气污染可能通过影响儿童控制冲动能力而导致其肥胖。研究发现，在出生第一年接触较高浓度 PM2.5 的婴儿在儿童后期更容易出现冲动控制障碍。PM2.5 颗粒物常见人为来源包括交通和化石燃料燃烧，它与一系列健康问题相关，如痴呆症和中风。此前的研究表明 PM2.5 会扰乱新陈代谢并与体重增加有关。研究人员分析了墨西哥城的 434 名儿童的数据，他们多数出生于 2007-2008 年间。研究人员模拟了孕期和儿童出生后第一年的环境 PM2.5 水平。之后研究人员对这些儿童的冲动性和肥胖进行了评估。PM2.5 暴露水平最高的儿童组表现出较高的冲动性，反映出其抑制控制能力存在显著缺陷。

近日，联合国儿童基金会发布的一份声明引发关注。通过对10个国家最新数据的分析，儿基会估计全球至少有2000万名儿童已经使用过人工智能，且青少年采用该技术人数的增长速度是成年人的3倍多。

每逢重大赛事，一些不法分子往往借助赛事热度，通过非法网络售彩、编造所谓“专家预测”、直播诱赌等方式实施诈骗，不仅侵害群众财产安全，也扰乱了正常的购彩秩序。

为指导金融信息服务机构开展数据分类分级和重要数据识别工作，提升金融信息服务数据安全水平，前不久，国家互联网信息办公室、中国人民银行、国家金融监督管理总局等六部门联合印发了《金融信息服务数据分类分级指南》（以下简称《指南》）。

2026年7月3日，国家互联网信息办公室就《互联网信息服务管理办法（修订草案征求意见稿）》公开征求意见。《互联网信息服务管理办法》是规范我国互联网信息服务的重要行政法规，对网络空间依法治理发挥积极作用。