Weekly briefing

Week 9 · 28 Feb – 6 Mar 2022 UTC · assess the changes, then plan the next dates.

All dated changes in this period

73 source records · 14 groups

3 Mar 2022

SecurityCisco38 source records

Cisco · exploited, added to CISA KEV · 38 entries

Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2017-12238
Assessment context
CISA lists it as exploited
Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2018-0155
Assessment context
CISA lists it as exploited
Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2017-12233
Assessment context
CISA lists it as exploited

Show the other 35 entries

Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2017-12234
Assessment context
CISA lists it as exploited
Cisco IOS Software Denial-of-Service Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2018-0179
Assessment context
CISA lists it as exploited
Cisco IOS Software Denial-of-Service Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2018-0180
Assessment context
CISA lists it as exploited
Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2018-0154
Assessment context
CISA lists it as exploited
Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2017-12231
Assessment context
CISA lists it as exploited
Cisco IOS Software Resource Management Errors Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2018-0161
Assessment context
CISA lists it as exploited
Cisco IOS Software SNMP Remote Code Execution Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2017-6744
Assessment context
CISA lists it as exploited
Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2017-6663
Assessment context
CISA lists it as exploited
Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2018-0174
Assessment context
CISA lists it as exploited
Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2018-0151
Assessment context
CISA lists it as exploited
Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2018-0156
Assessment context
CISA lists it as exploited
Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2017-6627
Assessment context
CISA lists it as exploited
Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2017-12235
Assessment context
CISA lists it as exploited
Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2017-12232
Assessment context
CISA lists it as exploited
Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2017-12319
Assessment context
CISA lists it as exploited
Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2017-12240
Assessment context
CISA lists it as exploited
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2018-0172
Assessment context
CISA lists it as exploited
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2018-0173
Assessment context
CISA lists it as exploited
Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2017-12237
Assessment context
CISA lists it as exploited
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2017-6736
Assessment context
CISA lists it as exploited
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2017-6737
Assessment context
CISA lists it as exploited
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2017-6738
Assessment context
CISA lists it as exploited
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2017-6739
Assessment context
CISA lists it as exploited
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2017-6740
Assessment context
CISA lists it as exploited
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2017-6743
Assessment context
CISA lists it as exploited
Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2018-0158
Assessment context
CISA lists it as exploited
Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2018-0159
Assessment context
CISA lists it as exploited
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2018-0167
Assessment context
CISA lists it as exploited
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2018-0175
Assessment context
CISA lists it as exploited
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2022-20699
Assessment context
CISA lists it as exploited
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2022-20700
Assessment context
CISA lists it as exploited
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2022-20701
Assessment context
CISA lists it as exploited
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2022-20703
Assessment context
CISA lists it as exploited
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2022-20708
Assessment context
CISA lists it as exploited
Cisco Small Business Routers Improper Input Validation Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2019-1652
Assessment context
CISA lists it as exploited

3 Mar 2022

SecurityMozilla Firefox

Mozilla Firefox Information Disclosure Vulnerability

Mozilla · exploited, added to CISA KEV

CVE-2013-1675

Assessment context

CISA lists it as exploited

3 Mar 2022

SecurityOracle Java6 source records

Oracle · exploited, added to CISA KEV · 6 entries

Oracle Java SE Integrity Check Vulnerability
Oracle · exploited, added to CISA KEV
CVE-2015-4902
Assessment context
CISA lists it as exploited
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Oracle · exploited, added to CISA KEV
CVE-2011-3544
Assessment context
CISA lists it as exploited
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Oracle · exploited, added to CISA KEV
CVE-2012-0507
Assessment context
CISA lists it as exploited, including by ransomware

Show the other 3 entries

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Oracle · exploited, added to CISA KEV
CVE-2012-1723
Assessment context
CISA lists it as exploited, including by ransomware
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Oracle · exploited, added to CISA KEV
CVE-2012-4681
Assessment context
CISA lists it as exploited, including by ransomware
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
Oracle · exploited, added to CISA KEV
CVE-2015-2590
Assessment context
CISA lists it as exploited

3 Mar 2022

SecurityExchange

Microsoft Exchange Server Privilege Escalation Vulnerability

Added to CISA KEV

CVE-2018-8581

Assessment context

CISA lists it as exploited

3 Mar 2022

SecurityMicrosoft 365 Apps11 source records

Added to CISA KEV · 11 entries

Microsoft Excel Featheader Record Memory Corruption Vulnerability
Added to CISA KEV
CVE-2009-3129
Assessment context
CISA lists it as exploited
Microsoft Excel Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2019-1297
Assessment context
CISA lists it as exploited
Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2012-1856
Assessment context
CISA lists it as exploited

Show the other 8 entries

Microsoft Office Malformed EPS File Vulnerability
Added to CISA KEV
CVE-2015-2545
Assessment context
CISA lists it as exploited
Microsoft Office Memory Corruption Vulnerability
Added to CISA KEV
CVE-2015-1642
Assessment context
CISA lists it as exploited
Microsoft Office Memory Corruption Vulnerability
Added to CISA KEV
CVE-2016-7193
Assessment context
CISA lists it as exploited
Microsoft Office Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2017-11826
Assessment context
CISA lists it as exploited
Microsoft Office Security Feature Bypass Vulnerability
Added to CISA KEV
CVE-2016-7262
Assessment context
CISA lists it as exploited
Microsoft Office Stack-based Buffer Overflow Vulnerability
Added to CISA KEV
CVE-2010-3333
Assessment context
CISA lists it as exploited
Microsoft Office Use-After-Free Vulnerability
Added to CISA KEV
CVE-2017-0261
Assessment context
CISA lists it as exploited
Microsoft PowerPoint Memory Corruption Vulnerability
Added to CISA KEV
CVE-2015-2424
Assessment context
CISA lists it as exploited

3 Mar 2022

SecurityMicrosoft ATM Font Driver Privilege Escalation Vulnerability

Microsoft ATM Font Driver Privilege Escalation Vulnerability

Added to CISA KEV

CVE-2015-2387

Assessment context

CISA lists it as exploited

3 Mar 2022

SecurityMicrosoft Forefront TMG Remote Code Execution Vulnerability

Microsoft Forefront TMG Remote Code Execution Vulnerability

Added to CISA KEV

CVE-2011-1889

Assessment context

CISA lists it as exploited

3 Mar 2022

SecurityMicrosoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability

Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability

Added to CISA KEV

CVE-2017-0001

Assessment context

CISA lists it as exploited

3 Mar 2022

SecurityMicrosoft Internet Explorer Remote Code Execution Vulnerability

Microsoft Internet Explorer Remote Code Execution Vulnerability

Added to CISA KEV

CVE-2013-1347

Assessment context

CISA lists it as exploited

3 Mar 2022

SecurityMicrosoft Internet Explorer Use-After-Free Vulnerability

Microsoft Internet Explorer Use-After-Free Vulnerability

Added to CISA KEV

CVE-2013-3897

Assessment context

CISA lists it as exploited

3 Mar 2022

SecurityMicrosoft Malware Protection Engine Improper Restriction of Operations Vulnerability

Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability

Added to CISA KEV

CVE-2017-8540

Assessment context

CISA lists it as exploited

3 Mar 2022

SecurityMicrosoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k Privilege Escalation Vulnerability

Added to CISA KEV

CVE-2015-1701

Assessment context

CISA lists it as exploited

3 Mar 2022

SecurityWindows8 source records

Added to CISA KEV · 8 entries

Microsoft Windows Improper Input Validation Vulnerability
Added to CISA KEV
CVE-2009-1123
Assessment context
CISA lists it as exploited
Microsoft Windows Installer Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2021-41379
Assessment context
CISA lists it as exploited
Microsoft Windows Kernel Exception Handler Vulnerability
Added to CISA KEV
CVE-2010-0232
Assessment context
CISA lists it as exploited

Show the other 5 entries

Microsoft Windows Kernel Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2013-5065
Assessment context
CISA lists it as exploited
Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2014-4114
Assessment context
CISA lists it as exploited
Microsoft Windows Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2002-0367
Assessment context
CISA lists it as exploited
Microsoft Windows Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2004-0210
Assessment context
CISA lists it as exploited
Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2016-0099
Assessment context
CISA lists it as exploited

28 Feb 2022

CommunityEvotec (Przemysław Kłys)

PowerShell – Comparing advanced objects

Community post · Evotec (Przemysław Kłys)

Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.