Mar 7, 2023
3 new incidents, 0 with updates.
Started
- ClosedPatched
Teclib GLPI: Remote Code Execution (CVE-2022-35914)
Teclib GLPI contains a remote code execution vulnerability in the third-party library, htmlawed. Added to CISA KEV on 2023-03-07.
Teclib GLPIClosed Mar 7, 2023
- ClosedPatched
Apache Spark: Command Injection (CVE-2022-33891)
Apache Spark contains a command injection vulnerability via Spark User Interface (UI) when Access Control Lists (ACLs) are enabled. Added to CISA KEV on 2023-03-07.
Apache SparkClosed Mar 7, 2023
- ClosedPatched
Zoho ManageEngine: ADSelfService Plus Remote Code Execution (CVE-2022-28810)
Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset. Added to CISA KEV on 2023-03-07.
Zoho ManageEngineClosed Mar 7, 2023
