105 matches found
EUVD-2025-74160
Malicious code in testyroundwormtan-62 npm...
EUVD-2025-77578
Malicious code in lineargorillacyan-62 npm...
EUVD-2025-77658
Malicious code in creativeboajade-62 npm...
EUVD-2025-72039
Malicious code in pumapink-62 npm...
EUVD-2004-2745
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2017-15406
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack buffer overflow in V8 in Google Chrome prior to 62.0.3202.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: I’m speaking at Boskone 62 in Boston, Massachusetts, USA, which runs from February 14-16, 2025. My talk is at 4:00 PM ET on the 15th. I’m speaking at the Rossfest Symposium in Cambridge, UK, on March 25, 2025. The list is maintaine...
SUSE SLES12 Security Update : kernel (Live Patch 62 for SLE 12 SP5) (SUSE-SU-2025:0414-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:0414-1 advisory. This update for the Linux Kernel 4.12.14-122234 fixes one issue. The following security issue was fixed: - CVE-2024-45016: netem: fix return value if...
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: I’m speaking on “AI: Trust & Power” at Capricon 45 in Chicago, Illinois, USA, at 11:30 AM on February 7, 2025. I’m also signing books there on Saturday, February 8, starting at 1:45 PM. I’m speaking at Boskone 62 in Boston,...
OESA-2024-2384 openssl security update
OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: Use of the low-level GF2^m elliptic curve APIs with untrusted explicit values for the field polynomial can lead to...
Adobe Audition < 14.4 Memory leak (APSB21-62) (macOS)
The version of Adobe Audition installed on the remote macOS host is prior to 14.4. It is, therefore, affected by a vulnerability as referenced in the APSB21-62 advisory. - Adobe Audition version 14.2 and earlier is affected by an out-of-bounds read vulnerability when parsing a specially crafted...
Adobe After Effects < 17.1.3 Multiple Arbitrary Code Execution (APSB20-62) (macOS)
The version of Adobe After Effects installed on the remote macOS host is prior to 17.1.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-62 advisory. - Adobe After Effects version 17.1.1 and earlier for Windows is affected by an uncontrolled search path...
Adobe Dimension < 3.4.10 Memory leak (APSB23-62) (macOS)
The version of Adobe Dimension installed on the remote macOS host is prior to 3.4.10. It is, therefore, affected by a vulnerability as referenced in the APSB23-62 advisory. - Adobe Dimension versions 3.4.9 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosur...
Adobe Dimension < 3.4.10 Memory leak (APSB23-62)
The version of Adobe Dimension installed on the remote Windows host is prior to 3.4.10. It is, therefore, affected by a vulnerability as referenced in the APSB23-62 advisory. - Adobe Dimension versions 3.4.9 and earlier is affected by an out-of-bounds read vulnerability that could lead to...
Debian: Security Advisory (DLA-62-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2017-5125
Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
SUSE CVE-2017-5131
An integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an out-of-bounds write...
SUSE CVE-2017-15388
Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
