614 matches found
CVE-2021-41392
Boost Note
Boost Note 注入漏洞
Boost Note is an open source developer-friendly workspace with IDE-like UX. it provides the following features focusing on information management and searchability. A security vulnerability exists in Boost Note versions prior to 0.22.0 that stems from a lack of effective filtering and validation ...
CvxLocker.setBoost wrong validation
Handle cmichel Vulnerability details Vulnerability Details The CvxLocker.setBoost function does not validate the max, rate parameters, instead it validates the already set storage variables. // @audit this is checking the already-set storage variables, not the parameters requiremaximumBoostPaymen...
Golang Cryptomining Worm Offers 15% Speed Boost
A freshly discovered variant of the Golang crypto-worm was recently spotted dropping Monero-mining malware on victim machines; in a switch-up of tactics, the payload binaries are capable of speeding up the mining process by 15 percent, researchers said. According to research from Uptycs, the worm...
Security update for icinga2 (moderate)
openSUSE Security Update: Security update for icinga2 Announcement ID: openSUSE-SU-2021:1054-1 Rating: moderate References: 1180147 Cross-References: CVE-2020-29663 CVSS scores: CVE-2020-29663 NVD : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2020-29663 SUSE: 5.3...
SUSE: Security Advisory (SUSE-SU-2012:0882-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GLSA-202105-04 : Boost: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-202105-04 Boost: Buffer overflow It was discovered that Boost incorrectly sanitized nextsize and maxsize parameter in orderedmalloc function when allocating memory. Impact : A remote attacker could provide a specially crafted...
Boost Connect community Galaxy Client 代码问题漏洞
Boost Connect community Galaxy Client is a Boost Connect community open source application. It provides a function to remove unused PC programs. A code issue vulnerability exists in Galaxy Client 2.0.28.9, which can be exploited by an attacker to potentially run code locally via an unsigned DLL...
SUSE-RU-2021:1414-1 Recommended update for boost-legacy
This update for boost-legacy fixes the following issues: Create a new boost-legacy package with version 1.66.0. bsc1175886, jscSLE-17304, jscECO-3147 - Remove duplicate license package that we get from original Boost - Add a backport of Boost.Optional::hasvalue for LibreOffice - Use %license...
SUSE SLES12 Security Update : nghttp2 (SUSE-SU-2021:0932-1) (Data Dribble) (Resource Loop)
This update for nghttp2 fixes the following issues : Security issues fixed : CVE-2020-11080: HTTP/2 Large Settings Frame DoS bsc1181358. CVE-2019-9513: Fixed HTTP/2 implementation that is vulnerable to resource loops, potentially leading to a denial of service bsc1146184. CVE-2019-9511: Fixed...
SUSE-SU-2021:0601-1 Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - CVE-2020-28493: Improve the speed of the 'urlize' filter by reducing regex backtracking. Email matching requires a word character at the start of the domain part, and only word characters in the TLD. bsc1181944...
OSV-2018-417 UNKNOWN READ in boost::sub_match<std::__1::__wrap_iter<char const*> >::sub_match
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9539 Crash type: UNKNOWN READ Crash state: boost::submatch ::submatch ZNSt316vectorIN5boost9submatchINS11wrapiterIPKcEEEENS9allocatorIS7EEE1 boost::matchresults, std::1::allocatorboo...
OSV-2018-389 UNKNOWN READ in boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, boo
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6708 Crash type: UNKNOWN READ Crash state: boost::redetailNUMBER::basicregexcreatorchar, boost::regextraitschar, boo boost::redetailNUMBER::basicregexcreatorchar, boost::regextraitschar, boo...
Easy Emulator Personal Edition suffers from a local boost vulnerability
The business scope of Shanghai Maiwei Software Technology Co., Ltd. includes: engaging in technology development, technology transfer, technical consultation, technical services in the field of communication technology, computer technology, computers, software and auxiliary equipment. There is a...
boost bug fix and enhancement update
An update is available for boost. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...
Security update for pdns (moderate)
openSUSE Security Update: Security update for pdns Announcement ID: openSUSE-SU-2020:1556-1 Rating: moderate References: 1156196 1176312 1176535 Cross-References: CVE-2020-17482 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 SU...
OPENSUSE-SU-2020:1556-1 Security update for pdns
This update for pdns fixes the following issues: - Build with libmaxminddb instead of the obsolete GeoIP boo1156196 - CVE-2020-17482: Fixed an error that can result in leaking of uninitialised memory through crafted zone records boo1176535 - Backported compilation fix vs. latest Boost 1.74...
A week in security (August 17 – 23)
Last week on Malwarebytes Labs, we looked at the impact of COVID-19 on healthcare cybersecurity, dug into some pandemic stats in terms of how workforces coped with going remote, and served up a crash course on malware detection. Our most recent Lock and Code podcast explored the safety of parenta...
boost-geometry.203548.n3.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1186751 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
boost.2283326.n4.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1181769 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...