SUSE-SU-2024:0963-1 Security update for dav1d

This update for dav1d fixes the following issues: - CVE-2024-1580: Fixed tilestartoff calculations for extremely large frame sizes bsc1220100...

About the security content of iOS 17.4.1 and iPadOS 17.4.1

About the security content of iOS 17.4.1 and iPadOS 17.4.1 This document describes the security content of iOS 17.4.1 and iPadOS 17.4.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

About the security content of visionOS 1.1.1

About the security content of visionOS 1.1.1 This document describes the security content of visionOS 1.1.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

About the security content of iOS 16.7.7 and iPadOS 16.7.7

About the security content of iOS 16.7.7 and iPadOS 16.7.7 This document describes the security content of iOS 16.7.7 and iPadOS 16.7.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

About the security content of iOS 17.4.1 and iPadOS 17.4.1

About the security content of iOS 17.4.1 and iPadOS 17.4.1 This document describes the security content of iOS 17.4.1 and iPadOS 17.4.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

About the security content of visionOS 1.1.1

About the security content of visionOS 1.1.1 This document describes the security content of visionOS 1.1.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

CVE-2024-1580

creationtimestamp| type| source ---|---|--- 2024-02-19 12:21:31+00:00| seen| https://t.me/ctinow/187611 2024-02-19 12:31:31+00:00| seen| https://t.me/ctinow/187616 2024-02-20 18:50:27+00:00| seen| https://t.me/arpsyndicate/3672 2024-03-08 10:22:18+00:00| seen| https://t.me/ctinow/203202 2024-03-1...

CVE-2024-1580

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d...

CVE-2024-1580

CVE-2024-1580: an integer overflow in the dav1d AV1 decoder can cause memory corruption when decoding large-frame videos. Upgrading past 1.4.0 is recommended. Debian reports fixes in bullseye 0.7.1-3+deb11u1 and bookworm 1.0.0-2+deb12u1. Apple advisories link CVE-2024-1580 to out-of-bounds write ...

CVE-2024-1580 Integer overflow in VideoLAN dav1d

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d...

Oracle Linux 8 : virt:rhel (ELSA-2019-1580)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1580 advisory. - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes CVE-2019-3863 - fix integer overflow in SSH packet processing...

CVE-2023-1580

Uncontrolled resource consumption in the logging feature in Devolutions Gateway 2023.1.1 and earlier allows an attacker to cause a denial of service by filling up the disk and render the system unusable...

CVE-2023-1580

CVE-2023-1580 affects Devolutions Gateway 2023.1.1 and earlier. The underlying issue is uncontrolled resource consumption in the logging feature, which can be exploited by an attacker to cause a denial of service by filling up disk space, rendering the system unusable. The CVSS/metrics indicate n...

CVE-2022-1580

creationtimestamp| type| source ---|---|--- 2022-09-19 18:38:18+00:00| seen| https://t.me/cibsecurity/50046...

CVE-2022-1580

The Site Offline Or Coming Soon Or Maintenance Mode WordPress plugin before 1.5.3 prevents users from accessing a website but does not do so if the URL contained certain keywords. Adding those keywords to the URL's query string would bypass the plugin's main feature...

CVE-2022-1580

CVE-2022-1580 affects the WordPress Site Offline plugin (versions before 1.5.3). The vulnerability is an authorization bypass where certain keywords in the URL query string allow bypassing the maintenance/offline protection, potentially exposing a site that should be offline. The NUCLEI template ...

CVE-2022-1580 Site Offline < 1.5.3 - Access Bypass

The Site Offline Or Coming Soon Or Maintenance Mode WordPress plugin before 1.5.3 prevents users from accessing a website but does not do so if the URL contained certain keywords. Adding those keywords to the URL's query string would bypass the plugin's main feature...

Mageia: Security Advisory (MGASA-2014-0419)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-1580

Cisco APIC/Cisco Cloud APIC expose CVE-2021-1580 as a remote command-injection and file-upload vulnerability in the web UI and API endpoints. The issue stems from insufficient input validation, enabling a remote attacker to execute commands or upload files on the affected system. Exploitation det...

SUSE: Security Advisory (SUSE-SU-2020:1580-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...