Cisco Secure Network Analytics 代码问题漏洞

Cisco Secure Network Analytics is one of the most comprehensive visibility and Network Traffic Analysis Nta/Network Detection and Response Ndr solutions from Cisco, Inc. It is used to provide continuous, real-time monitoring and a universal view of all network traffic. A security vulnerability...

Malicious code in kemnasa-sp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11e53e1596af827447edef4919e4a6f003dcb35cfd0e674d6062c2a626982249 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Docker Desktop platform for developing and delivering container applications lies in its improper protection of an alternative path, allowing a attacker to execute arbitrary code.

The vulnerability of the Docker Desktop platform for developing and delivering container applications is related to the lack of measures taken at the management level to clean up data. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

CVE-2023-28464

hciconncleanup in net/bluetooth/hciconn.c in the Linux kernel through 6.2.9 has a use-after-free observed in hciconnhashflush because of calls to hcidevput and hciconnput. There is a double free that may lead to privilege escalation...

AZL-25956 CVE-2023-28464 affecting package kernel for versions less than 5.15.122.1-2

hciconncleanup in net/bluetooth/hciconn.c in the Linux kernel through 6.2.9 has a use-after-free observed in hciconnhashflush because of calls to hcidevput and hciconnput. There is a double free that may lead to privilege escalation...

UBUNTU-CVE-2023-28464

hciconncleanup in net/bluetooth/hciconn.c in the Linux kernel through 6.2.9 has a use-after-free observed in hciconnhashflush because of calls to hcidevput and hciconnput. There is a double free that may lead to privilege escalation...

SUSE-SU-2023:1714-1 Security update for flatpak

This update for flatpak fixes the following issues: - CVE-2023-28101: Fixed misleading terminal output with metadata with ANSI control codes bsc1209410. - CVE-2023-28100: Fixed unsandboxed TIOCLINUX commands bsc1209411. Update to version 1.10.8: - If an app update is blocked by parental controls...

DEBIAN-CVE-2022-36059

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

The vulnerability in the web interface of the microprogramming software for TP-Link Archer C50 allows a hacker to trigger a service failure.

The vulnerability of the web-based management interface for TP-Link Archer C50 wireless routers is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

WordPress plugin Custom Permalinks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

Malicious code in fca-hnn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76a92f29775e28abc7462b6692bc5ffa08e51b5889f6f65e63fe9810e8794d62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-53045

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the DRM encoder handling during unbinding, specifically within the drm/rockchip and dw hdmi components. This issue results in a use-after-free crash...

The vulnerability of Microsoft Office packages, related to improper cleaning or release of resources, allows a perpetrator to cause a service failure.

The vulnerability of Microsoft Office packages is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Malicious code in ikemurami-di (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83c9d5062a3f6d873f6c8e5dacdd74ae75b2fb4f5f5c1726bd51015245d702f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Moodle 安全漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle that stems from a risk of arbitrary file reads due to inadequate backup cleanup...

SUSE CVE-2023-27783

An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpeditdltcleanup function at plugins/dltplugins.c...

WordPress Plugin WP Express Checkout 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

UBUNTU-CVE-2023-27783

An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpeditdltcleanup function at plugins/dltplugins.c...

Malicious code in sp-yammer-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23e8aa9f2fdde63c7f1d8b9e4885d5fb8dcc69ae8544c66b319067aba02d0c62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

TCPreplay 安全漏洞

Appneta Tcpreplay is a set of open source utilities for editing and replaying network traffic for UNIX-based operating systems from Appneta, USA. A security vulnerability exists in TCPreplay tcprewrite version v.4.4.3. An attacker has exploited this vulnerability to cause a denial of service via...