GSD-2022-1002982 driver: base: fix UAF when driver_attach failed

driver: base: fix UAF when driverattach failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...

GSD-2022-1002640 driver: base: fix UAF when driver_attach failed

driver: base: fix UAF when driverattach failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

libgcrypt security update

An update is available for libgcrypt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libgcrypt library provides general-purpose implementations of various...

RHEL 7 : 389-ds-base (RHSA-2022:5239)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5239 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

Mageia: Security Advisory (MGASA-2022-0239)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2022-0241)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated 389-ds-base packages fix security vulnerability

An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows...

The vulnerability of the Base component in Google Chrome and Microsoft browsers allows a hacker to execute arbitrary code.

The vulnerability of the Base component in Google Chrome and Microsoft Edge relates to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Malicious Package

Overview axp-base is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Chromium: CVE-2022-2156 Use after free in Base

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Base rate update frequency can be bypassed by an admin

Lines of code Vulnerability details Impact Base rate update frequency can be bypassed by an admin. Above function require updateFrequency blocks to be passed. Proof of Concept function updateBaseRateuint newBaseRatePerYear public // check the current block number uint blockNumber = block.number;...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser by Google Inc. of the U.S. V8 is one of the open source JavaScript engines. Google Chrome suffers from a resource management error vulnerability that stems from reuse after release in Base...

Malicious code in here_base_theme_v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db50d9a1d1f84f2de476e484af2c0192b0d6a28e77f68ed365d8602ec957324a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

2022-06 Cumulative Update for Windows Server, version 20H2 for ARM64-based Systems (KB5016139)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2022-06 Cumulative Update for Windows 10 Version 21H1 for ARM64-based Systems (KB5016139)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2022-06 Cumulative Update for Windows 11 for ARM64-based Systems (KB5016138)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

Security Bulletin: IBM Security Guardium is affected by a mongodb-driver-legacy-4.1.1.jar vulnerability (CVE-2021-20328)

Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2021-20328 DESCRIPTION: MongoDB Java driver is vulnerable to a man-in-the-middle attack, caused by improper host name verification on the KMS server's certificate. An attacker could exploit this...

Malicious code in res-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a93597f1f8b3cccc9c9376c46c7c4bb4aa253d0a1023a670719749e01333d541 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5759 Malicious code in res-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a93597f1f8b3cccc9c9376c46c7c4bb4aa253d0a1023a670719749e01333d541 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in base-css-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f81c6f392029b9702f5a17b445a87e8a4378d5931d872e0755c58ae4c55ea005 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...