Vulnerability Disclosure

CVE-2022-22977: VMware Guest Authentication Service LPE (FIXED)

CVE-2022-30525 (FIXED): Zyxel Firewall Unauthenticated Remote Command Injection

CVE-2022-28810: ManageEngine ADSelfService Plus Authenticated Command Execution (Fixed)

CVE-2022-24527: Microsoft Connected Cache Local Privilege Escalation (Fixed)

CVE-2022-1026: Kyocera Net View Address Book Exposure

CVE-2021-4191: GitLab GraphQL API User Enumeration (FIXED)

CVE-2021-20038..42: SonicWall SMA 100 Multiple Vulnerabilities (FIXED)

CVE-2021-3546[78]: Akkadian Console Server Vulnerabilities (FIXED)

CVE-2021-3927[67]: Fortress S03 WiFi Home Security System Vulnerabilities

Fortinet FortiWeb OS Command Injection

Multiple Open Source Web App Vulnerabilities Fixed

CVE-2020-7387..7390: Multiple Sage X3 Vulnerabilities

CVE-2021-20025: SonicWall Email Security Appliance Backdoor Credential

Akkadian Provisioning Manager Multiple Vulnerabilities Disclosure (Fixed)

CVE-2021-3198 and CVE-2021-3540: MobileIron Shell Escape Privilege Escalation Vulnerabilities

Patch Tuesday Dashboard Template Release

CVE-2021-26908 and CVE-2021-26909: Automox Agent Information Disclosure (FIXED)

CVE-2021-22652: Advantech iView Missing Authentication RCE (FIXED)

CVE-2020-7378: OpenCRX Unverified Password Change (FIXED)

Vulntober: Multiple Mobile Browser Address Bar Spoofing Vulnerabilities

CVE-2020-2021 Authentication Bypass in PAN-OS Security Assertion Markup Language (SAML) Authentication Disclosed