420 matches found
Exploit for Out-of-bounds Write in Hutool
json.org CVE-2022-45688 false positive The project contains...
US pharmacy Rite Aid banned from operating facial recognition systems
Pharmacy chain Rite Aid has been denied the right to run facial recognition systems in its stores for five years, by a Federal Trade Commission FTC ruling. The regulator found so many flaws in the retailers surveillance program that it concluded Rite Aid had failed to implement reasonable...
Vulnerability Scanner Detection Related to CVE-2023-38545
Veeam Backup & Replication 12.1.2 Release - Article Update With the release of Veeam Backup & Replication 12.1.2, the VDDK libraries, which contained the libcurl library, are no longer included with the Veeam Transport package. After upgrading, the Veeam Transport Package on remote components wil...
Google Unveils RETVec - Gmail's New Defense Against Spam and Malicious Emails
Google has revealed a new multilingual text vectorizer called RETVec short for Resilient and Efficient Text Vectorizer to help detect potentially harmful content such as spam and malicious emails in Gmail. "RETVec is trained to be resilient against character-level manipulations including insertio...
FALSE POSITIVE - OpenSearch Vulnerability in Bitbucket Data Center and Server
Notice of FALSE POSITIVE After review, it has been determined that CVE-2022-41906 DOES NOT affect ANY version of Bitbucket Data Center or Bitbucket Server. We have updated our bulletin and Jira tickets to reflect this update. We have taken action to prevent this false-positive from appearing in o...
Virtuozzo Hybrid Infrastructure 5.4 Update 4 (5.4.4-112)
This update delivers a new feature for the compute service, performance optimization for the object storage, as well as stability, security, and performance improvements. Vulnerability id: VSTOR-74916 VMs with Windows Server 2019, Windows Server 2022, and Windows 10 fail to boot after installatio...
Oracle Linux 6 / 7 : openssl (ELSA-2016-3621)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3621 advisory. - fix CVE-2016-2177 - possible integer overflow - fix CVE-2016-2178 - non-constant time DSA operations - fix CVE-2016-2179 - further DoS issues in...
Malicious code in false-positive-reddit-rce (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 18d0061817c889d31df1f475a5cb984705a83ac9e8117ef32c2429696d73ca20 The OpenSSF Package Analysis project identified 'false-positive-reddit-rce' @ 0.0.2 npm as malicious. It is considered malicious because: - The...
MAL-2023-1454 Malicious code in false-positive-reddit-rce (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 18d0061817c889d31df1f475a5cb984705a83ac9e8117ef32c2429696d73ca20 The OpenSSF Package Analysis project identified 'false-positive-reddit-rce' @ 0.0.2 npm as malicious. It is considered malicious because: - The...
SUSE CVE-2023-4205
This was deemed as a false positive both by the reporter and upstream kernel...
Design/Logic Flaw
Rejected reason: This was deemed as a false positive both by the reporter and upstream kernel...
CVE-2023-4205
Rejected reason: This was deemed as a false positive both by the reporter and upstream kernel...
UBUNTU-CVE-2023-4205
Rejected reason: This was deemed as a false positive both by the reporter and upstream kernel...
CVE-2023-4205
CVE-2023-4205 entry is rejected/not used; not an active vulnerability.
How Qualys Drives PCI DSS 4.0 Compliance for File Integrity Monitoring
The Payment Card Industry Data Security Standard PCI DSS is a well-known rule for compliance by merchants and entities involved in payment card processing. The new PCI DSS 4.0 standard specifies a broad range of technical and process requirements to ensure the safety of payment cardholder data or...
CVE-2023-0030
A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkmvmatail function to fail. This flaw allows a local user to crash or potentially escalate their privileges on the system...
CVE-2022-3857
Maintainer contacted. This is a false-positive. The flaw does not actually exist and was erroneously tested...
UBUNTU-CVE-2022-3857
Rejected reason: Maintainer contacted. This is a false-positive. The flaw does not actually exist and was erroneously tested...
APKHunt - Comprehensive Static Code Analysis Tool For Android Apps That Is Based On The OWASP MASVS Framework
APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their cod...
