11609 matches found
CVE-2021-35951
The CVE-2021-35951 issue affects fastrack Reflex 2.0 W307S_REFLEX_v90.89 Activity Tracker. A remote, unauthenticated attacker can send a malicious firmware update over Bluetooth Low Energy (BLE), potentially brick the device. The connected sources describe the vulnerability but do not provide a c...
[SECURITY] Fedora 36 Update: mod_auth_openidc-2.4.12.2-1.fc36
This module enables an Apache 2.x web server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server...
[SECURITY] Fedora 37 Update: mod_auth_openidc-2.4.12.2-1.fc37
This module enables an Apache 2.x web server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server...
Fedora: Security Advisory for mod_auth_openidc (FEDORA-2022-6beaa3bd0c)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for python3-docs (FEDORA-2022-dbb811d203)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Reddit: oauth misconfigration lead to account takeover
Vulnerability description not provided...
EulerOS 2.0 SP10 : uboot-tools (EulerOS-SA-2022-2858)
According to the versions of the uboot-tools package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - nfslookupreply in net/nfs.c in Das U-Boot through 2022.04 and through 2022.07-rc2 has an unbounded memcpy with a failed length check, leadin...
EulerOS 2.0 SP10 : linux-firmware (EulerOS-SA-2022-2826)
According to the versions of the linux-firmware package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Improper buffer restriction in some IntelR Wireless BluetoothR products before version 21.110 may allow an unauthenticated user to...
EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-2861)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use After Free in GitHub repository vim/vim prior to 9.0.0360. CVE-2022-3099 - Use After Free in GitHub repository vim/vim prior to 9.0.0389...
EulerOS 2.0 SP10 : shim (EulerOS-SA-2022-2831)
According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally th...
CVE-2022-47547
GossipSub 1.1, as used for Ethereum 2.0, allows a peer to maintain a positive score and thus not be pruned from the network even though it continuously misbehaves by never forwarding topic messages...
CVE-2022-47547
GossipSub 1.1 (used in Ethereum 2.0) contains a vulnerability where a peer can continuously misbehave by not forwarding topic messages, yet maintain a positive score and avoid pruning. Root cause appears to be the peer scoring/penalty mechanism allowing misbehaving peers to stay in the network. D...
CVE-2022-47547
GossipSub 1.1, as used for Ethereum 2.0, allows a peer to maintain a positive score and thus not be pruned from the network even though it continuously misbehaves by never forwarding topic messages...
PT-2022-28072 · Gossipsub · Gossipsub
Name of the Vulnerable Software and Affected Versions: GossipSub version 1.1 Description: The issue allows a peer to maintain a positive score and remain in the network despite continuously misbehaving by not forwarding topic messages. This affects GossipSub 1.1 as used for Ethereum 2.0...
CVE-2022-31705
VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller EHCI. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESX...
CVE-2022-44910
Binbloom 2.0 was discovered to contain a heap buffer overflow via the readpointer function at /binbloom-master/src/helpers.c...
Heap overflow
Binbloom 2.0 was discovered to contain a heap buffer overflow via the readpointer function at /binbloom-master/src/helpers.c...
CVE-2022-44910
CVE-2022-44910 affects Binbloom 2.0, with a heap buffer overflow in the read_pointer function implemented at /binbloom-master/src/helpers.c. The vulnerability is confirmed by multiple sources (e.g., NVD/Red Hat) and has a CVSSv3.1 base score of 7.8 (HIGH). Provided connected documents state a wor...
CVE-2022-31705
VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller EHCI. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESX...