Adobe Bridge < 14.1.3 Multiple Vulnerabilities (APSB24-77)

The version of Adobe Bridge installed on the remote Windows host is prior to 14.1.3. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-77 advisory. - Out-of-bounds Read CWE-125 potentially leading to Memory leak CVE-2024-45147 - NULL Pointer Dereference CWE-476...

Adobe Bridge < 14.1.3 Multiple Vulnerabilities (APSB24-77)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 14.1.3. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-77 advisory. - Out-of-bounds Read CWE-125 potentially leading to Memory leak CVE-2024-45147 - NULL Pointer Dereference...

net/mlx5: Fix bridge mode operations when there are no VFs

...

kernel security update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

OESA-2024-2344 mosquitto security update

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...

OESA-2024-2346 mosquitto security update

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...

OESA-2024-2343 mosquitto security update

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...

MAL-2024-10560 Malicious code in immutable-axelar-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d36818770ca9a97d6b714a041348e2e44a341e8d2f017aff4fb1dc912d185e41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in immutable-axelar-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d36818770ca9a97d6b714a041348e2e44a341e8d2f017aff4fb1dc912d185e41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Tenda O3 security vulnerabilities

Tenda O3 is an outdoor wireless bridge from Tenda, China. The Tenda O3 suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. A remote attacker could use this vulnerability to cause a denial of service via a fixed-format...

CVE-2024-52017

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at bridgewirelessmain.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51014

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssidan parameter in bridgewirelessmain.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

kernel: netfilter: bridge: replace physindev with physinif in nf_bridge_info

CVE-2024-35839 is a flaw in the Linux kernel's Netfilter bridge functionality. It occurs when bridging certain packets, such as those involving destination NAT between virtual Ethernet interfaces. A mismatch between the network device associated with a packet and the neighbor's device can lead to...

kernel: netfilter: bridge: replace physindev with physinif in nf_bridge_info

CVE-2024-35839 is a flaw in the Linux kernel's Netfilter bridge functionality. It occurs when bridging certain packets, such as those involving destination NAT between virtual Ethernet interfaces. A mismatch between the network device associated with a packet and the neighbor's device can lead to...

Moderate: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

NETGEAR XR300 security vulnerabilities

NETGEAR XR300 is a wireless router from NETGEAR. A security vulnerability exists in NETGEAR XR300 version v1.0.3.78, which stems from a buffer overflow vulnerability contained in the ssid parameter in the bridgewirelessmain.cgi component...

NETGEAR XR300 security vulnerabilities

The NETGEAR XR300 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR XR300 v1.0.3.78, which originates from the passphrase parameter in the bridgewirelessmain.cgi component that fails to correctly validate the length of the input data, and can be exploited by a...

NETGEAR XR300 security vulnerabilities

NETGEAR XR300 is a wireless router from NETGEAR. A security vulnerability exists in NETGEAR XR300 version v1.0.3.78, which stems from a buffer overflow vulnerability contained in the ssidan parameter in the bridgewirelessmain.cgi component...

PT-2024-8266 · NetGear · Netgear Xr300

Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.78 Description: The issue is related to a buffer overflow in the bridge wireless main.cgi script of Netgear XR300 routers, specifically when handling the ssid parameter. This can be exploited by sending a specially...

PT-2024-8245

Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.78 Description: The issue is related to a buffer overflow in the bridge wireless main.cgi script of the Netgear XR300 router's firmware, specifically when handling the passphrase parameter. This can be exploited by...