SUSE CVE-2018-5101

A use-after-free vulnerability can occur when manipulating floating "first-letter" style elements, resulting in a potentially exploitable crash. This vulnerability affects Firefox 58...

SUSE CVE-2018-5995

The pcpuembedfirstchunk function in mm/percpu.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "pages/cpu" printk call...

SUSE CVE-2019-0197

A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server...

SUSE CVE-2019-11502

snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first calling user. Consequently, that user had unintended access to a private /tmp directory...

SUSE CVE-2019-14378

ipreass in ipinput.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment...

SUSE CVE-2020-8621

In BIND 9.14.0 - 9.16.5, 9.17.0 - 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that 'forward only' are not affected...

SUSE CVE-2021-23214

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption...

SUSE CVE-2021-24122

When serving resources from a network location using the NTFS file system, Apache Tomcat versions 10.0.0-M1 to 10.0.0-M9, 9.0.0.M1 to 9.0.39, 8.5.0 to 8.5.59 and 7.0.0 to 7.0.106 were susceptible to JSP source code disclosure in some configurations. The root cause was the unexpected behaviour of...

SUSE CVE-2021-29604

TensorFlow is an end-to-end open source platform for machine learning. The TFLite implementation of hashtable lookup is vulnerable to a division by zero errorhttps://github.com/tensorflow/tensorflow/blob/1a8e885b864c818198a5b2c0cbbeca5a1e833bc8/tensorflow/lite/kernels/hashtablelookup.ccL114-L115 ...

SUSE CVE-2022-38475

An attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was zero-length, the value was not written to an invalid memory address. This vulnerability affects Firefox 104...

Studio Console Shows "Enable DaaS" for First Time Use

Citrix DaaS customers encounter the following message indicating their service needs to be enabled for one of the following reasons: 1 DaaS must be enabled for first time use 2 DaaS is disabled due to inactivity 3 DaaS subscription licenses are updated renewal or net new...

Cloud-ready and Channel-first

Trend Micro named one of 2023’s coolest cloud security companies...

PT-2023-12310 · Teradek · Teradek Slice

Name of the Vulnerable Software and Affected Versions: Teradek Slice 1st generation firmware versions 7.3.x and earlier Description: The issue allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. This is a result of a Cross Site Scripting XSS...

CVE-2023-0613

creationtimestamp| type| source ---|---|--- 2023-02-01 16:14:12+00:00| seen| https://t.me/cibsecurity/57291...

The Definitive Browser Security Checklist

Security stakeholders have come to realize that the prominent role the browser has in the modern corporate environment requires a re-evaluation of how it is managed and protected. While not long-ago web-borne risks were still addressed by a patchwork of endpoint, network, and cloud solutions, it ...

JVN#05288621: EasyMail vulnerable to cross-site scripting

EasyMail provided by First Net Japan Inc. contains a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who accessed the site using the product. Solution Update the software Update the software to the latest version accordin...

Upgraded Q -> M from #113 [1674422768939]

Judge has assessed an item in Issue 113 as M risk. The relevant finding follows: During handling the open fees, the tigAsset is distributed to gov. But, it is not approved before to be consumed by gov. So, the first user's transaction to initiate a market order, will fail. During handling the clo...

CVE-2023-0052

creationtimestamp| type| source ---|---|--- 2023-01-21 00:22:56+00:00| seen| https://t.me/cibsecurity/56801 2026-07-26 02:02:31+00:00| seen| https://t.me/EchelonEyes/1082 2026-07-27 00:01:09+00:00| seen| https://t.me/EchelonEyes/1082 2026-07-28 03:00:04+00:00| seen| https://t.me/EchelonEyes/1082...

Battery discharge mechanism doesn't work correctly for first redemption

Lines of code Vulnerability details Impact The RTokenP1 contract implements a throttling mechanism using the RedemptionBatteryLib library. The library models a "battery" which "recharges" linearly block by block, over roughly 1 hour. RToken.sol function redeemuint256 amount external notFrozen //...

Vulnerability of the SM_io parser function: Decorator_::read_vertex(), set_first_out_edge() – components from Nef_S2/SM_io parser.h; library of computational geometry algorithms CGAL. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SMio parser function in the decorator::readvertex and setfirstoutedge components of the NefS2/SMio parser library, part of the Computational Geometry Library CGAL, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to...