Intel Distribution for GDB security vulnerabilities

Intel Distribution for GDB is a superset of the GNU Project Debugger GDB from Intel Corporation USA that extends some of the existing commands and functionality of GDB and in some cases adds additional debugger commands. A security vulnerability previously existed in Intel Distribution for GDB...

Cyber Power Systems PowerPanel Business Edition Security Vulnerabilities

Cyber Power Systems PowerPanel Business Edition is a suite of power management software from Cyber Power Systems, USA. The software automates the shutdown of physical and virtual infrastructures, and monitors and manages CyberPower UPS systems and network-connected PDUs Power Distribution Units. ...

UBUNTU-CVE-2024-30259

FastDDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves malformed RTPS packet, heap buffer overflow occurs on the subscriber. This can remotely crash any Fast-DDS...

CVE-2024-27852

A privacy issue was addressed with improved client ID handling for alternative app marketplaces. This issue is fixed in iOS 17.5 and iPadOS 17.5. A maliciously crafted webpage may be able to distribute a script that tracks users on other webpages...

Incident response analyst report 2023

Incident response analyst report 2023 As an information security company, our services include incident response and investigation, and malware analysis. Our customer base spans Russia, Europe, Asia, South and North America, Africa and the Middle East. Our annual Incident Response Report presents...

CVE-2024-27852

A privacy issue was addressed with improved client ID handling for alternative app marketplaces. This issue is fixed in iOS 17.5 and iPadOS 17.5. A maliciously crafted webpage may be able to distribute a script that tracks users on other webpages...

CVE-2024-30259 FastDDS heap buffer overflow when publisher sends malformed packet

FastDDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves malformed RTPS packet, heap buffer overflow occurs on the subscriber. This can remotely crash any Fast-DDS...

CVE-2024-30258

FastDDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves a malformed RTPS packet, the subscriber crashes when creating pthread. This can remotely crash any Fast-DD...

Xenstore DoS

The vulnerability of Xenstore information storage system in Xen hypervisors is related to the unlimited distribution of resources. Exploiting this vulnerability can allow attackers to cause service failures...

Xenstore DoS

The vulnerability of Xenstore information storage system in Xen hypervisors is related to the unlimited distribution of resources. Exploiting this vulnerability can allow attackers to cause service failures...

Xenstore DoS

The vulnerability of Xenstore information storage system in Xen hypervisors is related to the unlimited distribution of resources. Exploiting this vulnerability can allow attackers to cause service failures...

Xenstore DoS

The vulnerability of Xenstore information storage system in Xen hypervisors is related to the unlimited distribution of resources. Exploiting this vulnerability can allow attackers to cause service failures...

com.github.rjolly:flying-saucer (>=9.1.20, <=9.1.25), com.github.wpyuan:dc-print (>=0.1.1, <=0.4.0) +51 more potentially affected by CVE-2024-34447 via org.bouncycastle:bcprov-jdk14 (>=1.61, <=1.77)

org.bouncycastle:bcprov-jdk14 MAVEN version =1.61, =9.1.20, =0.1.1, =1.0.4, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =2.0.0-rc1, =2.0.0, =2.0.0-rc1, =2.0.0, =2.0.0-rc1, =2.0, =2.1 and more Source cves: CVE-2024-34447 Source advisory: OSV:GHSA-4H8F-2WVX-GG5W...

FreeRDP RDP DoS

The vulnerability of the RDP client FreeRDP is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Managed Detection and Response in 2023

Managed Detection and Response in 2023 PDF Alongside other security solutions, we provide Kaspersky Managed Detection and Response MDR to organizations worldwide, delivering expert monitoring and incident response 24/7. The task involves collecting telemetry for analysis by both machine-learning ...

org.jberet.test-apps:chunkpartition (1.0.0.alpha4), org.jberet.test-apps:chunkstop (1.0.0.alpha4) +14 more potentially affected by CVE-2024-1102 via org.jberet:jberet-core (1.0.0.alpha4)

org.jberet:jberet-core MAVEN version 1.0.0.alpha4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jberet:jberet-core and may be impacted: - org.jberet.test-apps:chunkpartition 1.0.0.alpha4 - org.jberet.test-apps:chunkstop 1.0.0.alpha4 -...

org.jberet.test-apps:chunkpartition (1.0.0.beta2), org.jberet.test-apps:chunkstop (1.0.0.beta2) +11 more potentially affected by CVE-2024-1102 via org.jberet:jberet-core (1.0.0.beta2)

org.jberet:jberet-core MAVEN version 1.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jberet:jberet-core and may be impacted: - org.jberet.test-apps:chunkpartition 1.0.0.beta2 - org.jberet.test-apps:chunkstop 1.0.0.beta2 -...

org.jberet:jberet-distribution (1.0.0.cr2), org.jberet:jberet-se (1.0.0.cr2) potentially affected by CVE-2024-1102 via org.jberet:jberet-core (1.0.0.cr2)

org.jberet:jberet-core MAVEN version 1.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jberet:jberet-core and may be impacted: - org.jberet:jberet-distribution 1.0.0.cr2 - org.jberet:jberet-se 1.0.0.cr2 Source cves: CVE-2024-1102 Source...

org.jberet:jberet-distribution (1.0.1.cr1), org.jberet:jberet-se (1.0.1.cr1) potentially affected by CVE-2024-1102 via org.jberet:jberet-core (1.0.1.cr1)

org.jberet:jberet-core MAVEN version 1.0.1.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jberet:jberet-core and may be impacted: - org.jberet:jberet-distribution 1.0.1.cr1 - org.jberet:jberet-se 1.0.1.cr1 Source cves: CVE-2024-1102 Source...

org.jberet:jberet-distribution (1.0.2.final), org.jberet:jberet-se (1.0.2.final) potentially affected by CVE-2024-1102 via org.jberet:jberet-core (1.0.2.final)

org.jberet:jberet-core MAVEN version 1.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jberet:jberet-core and may be impacted: - org.jberet:jberet-distribution 1.0.2.final - org.jberet:jberet-se 1.0.2.final Source cves: CVE-2024-1102 Sour...