85 matches found
New "GoFetch" Vulnerability in Apple M-Series Chips Leaks Secret Encryption Keys
A new security shortcoming discovered in Apple M-series chips could be exploited to extract secret keys used during cryptographic operations. Dubbed GoFetch, the vulnerability relates to a microarchitectural side-channel attack that takes advantage of a feature known as data memory-dependent...
Malicious code in dmp-suite (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 519dd07a618b2ba0671d86ef8fa2155f33aeaacdeed9a41d7f2e5257fb737aac The OpenSSF Package Analysis project identified 'dmp-suite' @ 11.11.3 pypi as malicious. It is considered malicious because: - The package...
MAL-2023-1363 Malicious code in dmp-suite (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 519dd07a618b2ba0671d86ef8fa2155f33aeaacdeed9a41d7f2e5257fb737aac The OpenSSF Package Analysis project identified 'dmp-suite' @ 11.11.3 pypi as malicious. It is considered malicious because: - The package...
SUSE CVE-2013-2483
The acnadddmpdata function in epan/dissectors/packet-acn.c in the ACN dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service divide-by-zero error and application crash via an invalid count value in ACNDMPADTDRE DMP data...
SUSE CVE-2017-15191
In Wireshark 2.4.0 to 2.4.1, 2.2.0 to 2.2.9, and 2.0.0 to 2.0.15, the DMP dissector could crash. This was addressed in epan/dissectors/packet-dmp.c by validating a string length...
SUSE CVE-2018-7421
In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the DMP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dmp.c by correctly supporting a bounded number of Security Categories for a DMP Security Classification...
dmp-bayern.de Cross Site Scripting vulnerability OBB-2689482
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2022-31665
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.15.46 Description The issue is related to the lpfc driver in the Linux Kernel. It involves moving a check for cfg log verbose before calling the lpfc dmp dbg function. The actual impact and potential for attack...
PT-2022-31416
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to the lpfc driver in the Linux Kernel. A potential security vulnerability exists due to the placement of a check for cfg log verbose before calling the lpfc dmp dbg...
PT-2022-3542
Name of the Vulnerable Software and Affected Versions Apple M1 and A14 processors affected versions not specified Description The issue is related to errors in pointer dereferencing in the Data Memory-Dependent Prefetcher DMP mechanism of Apple M1 and A14 processors. Exploitation of this issue ma...
Dmp Roadmap Cross-Site Scripting Vulnerability
Dmp Roadmap is a data management planning tool. a cross-site scripting vulnerability exists in Dmp Roadmap, which stems from the DMP roadmap prior to 3.0.4 and allows XSS. an attacker could exploit this vulnerability to execute client-side code...
CVE-2021-44896
DMP Roadmap before 3.0.4 allows XSS...
CVE-2021-44896
DMP Roadmap before 3.0.4 allows XSS...
CVE-2021-44896
DMP Roadmap before 3.0.4 allows XSS...
Cross site scripting
DMP Roadmap before 3.0.4 allows XSS...
CVE-2021-44896
DMP Roadmap vulnerability CVE-2021-44896 concerns XSS in DMP Roadmap prior to version 3.0.4. The affected software is DMP Roadmap (data management planning tool). The root cause is an XSS flaw present before 3.0.4, with no explicit exploitation details in the provided documents. Impact is describ...
CVE-2021-44896
DMP Roadmap before 3.0.4 allows XSS...
Dmp Roadmap Cross-Site Script Vulnerabilities
Dmp Roadmap is a data management planning tool. a cross-site scripting vulnerability exists in Dmp Roadmap, which stems from the DMP roadmap prior to 3.0.4 and allows XSS. an attacker could exploit this vulnerability to execute client-side code...
PT-2022-12254
Name of the Vulnerable Software and Affected Versions DMP Roadmap versions prior to 3.0.4 Description The issue allows for XSS. Recommendations For versions prior to 3.0.4, update to version 3.0.4 or later to resolve the issue...
dmp-30.cn Cross Site Scripting vulnerability OBB-1232311
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...