EulerOS 2.0 SP10 : kernel (EulerOS-SA-2022-2257)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable...

Intel Ethernet Controllers and Adapters Advisory - Lenovo Support US

No description provided...

The vulnerability of the API interface of Realtek USB network adapter drivers allows a hacker to trigger a service failure.

The vulnerability of the API interface of Realtek USB network adapter drivers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Malicious code in realm-postgres-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware daf91dad400c5ac4549be339b95e4daf9f243e91e319647ba513b0e799302fbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5706 Malicious code in realm-postgres-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware daf91dad400c5ac4549be339b95e4daf9f243e91e319647ba513b0e799302fbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scopely-mopub-aacebookaudiencenetwork-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aee14242e10a022c5151238ed0900d84007af9d10e3916aa39cc78066f58e2cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in defillama-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ef7aa8bba103fb56a7de97a2cdea32e904b12f16b59b373d57f365467389a3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2415 Malicious code in defillama-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ef7aa8bba103fb56a7de97a2cdea32e904b12f16b59b373d57f365467389a3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE SLES12 Security Update : kernel (SUSE-SU-2022:2080-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2080-1 advisory. - In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a...

SUSE: Security Advisory (SUSE-SU-2022:2078-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The Oracle address settings for the PriceOracle.sol contract are not checked for ZERO Address, and will not do the expected work if the prophecy machine address is set to Zero address (which will be populated with 0 by default if not passed to the constructor).

Lines of code Vulnerability details Impact Detailed description of the impact of this finding. The getPrice function of the PriceOracle contract internally calls getPriceFromAdapters to get the price, but does not check that the adapters are not set to Zero Address, so when the address in the...

Security Bulletin: IBM Security Verify Adapters are vulnerable to denial of service and bypass security restrictions due to OpenSSL (CVE-2021-3449, CVE-2021-3450)

Summary OpenSSL is used by the IBM Security Verify Adapters as part of its SSL communication. IBM Security Verify Adapters are vulnerable to denial of service CVE-2021-3449 and could allow a remote attacker to bypass security restrictions CVE-2021-3450 The fix includes OpenSSL version 1.1.1k...

OESA-2022-1660 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: Insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable denial of service via local access.CVE-2021-33061 A use after free in the Linux...

org.apache.uima:PearPackagingMavenPlugin (>=3.0.0-alpha <=3.0.0-alpha02), org.apache.uima:jcasgen-maven-plugin (>=3.0.0-alpha <=3.0.0-alpha02) +13 more potentially affected by CVE-2017-15691 via org.apache.uima:uimaj-core (>=3.0.0-alpha <=3.0.0-alpha02)

org.apache.uima:uimaj-core MAVEN version =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha02 Source cves:...

CVE-2021-33096

A denial-of-service flaw was found due to improper isolation of shared resources in the network on chip for the IntelR 82599 Ethernet Controllers and Adapters. This may allow an authenticated user to potentially create a denial of service via local access. Mitigation Mitigation for this issue is...

Security Bulletin: Mobilefirst is affected by a log4j vulnerability (CVE-2021-4104)

Summary A vulnerability in the Apache Log4j open source library has been reported in CVE-2021-4104. The version of log4j bundled within MFP 8.0 is 1.x and hence impacted by vulnerability CVE-2021-4104. Vulnerability Details CVEID: CVE-2021-4104 DESCRIPTION: Apache Log4j could allow a remote...

Input validation

Improper isolation of shared resources in network on chip for the IntelR 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable denial of service via local access...

CVE-2021-33061

Insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable denial of service via local access...

UBUNTU-CVE-2021-33113

Improper input validation for some IntelR PROSet/Wireless WiFi in multiple operating systems and KillerTM WiFi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access...

CVE-2021-33061

CVE-2021-33061 is described in connected advisories as an issue of insufficient control flow management in the Intel 82599 Ethernet Controllers and Adapters. The vulnerability could allow an authenticated local attacker to potentially cause a denial of service. The primary details provided indica...