393 matches found
AZL-52053 CVE-2024-49971 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Increase array size of dummyboolean WHY dml2coresharedmodesupport and dmlcoremodesupport access the third element of dummyboolean, i.e. hwdebug5 = &s-dummyboolean2, when dummyboolean has size of 2. Any assignment...
AZL-49386 CVE-2024-46726 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Ensure index calculation will not overflow WHY & HOW Make sure vmid0p72idx, vnom0p8idx and vmax0p9idx calculation will never overflow and exceess array size. This fixes 3 OVERRUN and 1 INTEGEROVERFLOW issues...
CVE-2024-38247
creationtimestamp| type| source ---|---|--- 2024-09-10 17:25:32+00:00| seen| https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review...
On the Voynich Manuscript
Really interesting article on the ancient-manuscript scholars who are applying their techniques to the Voynich Manuscript. No one has been able to understand the writing yet, but there are some new understandings: Davis presented her findings at the medieval-studies conference and published them ...
Education in Secure Software Development
The Linux Foundation and OpenSSF released a report on the state of education in secure software development. …many developers lack the essential knowledge and skills to effectively implement secure software development. Survey findings outlined in the report show nearly one-third of all...
jq update
An update is available for jq. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Bug Fixes: JQ findings from static application security testing Rocky Linux-37827...
PT-2024-33763
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.11.2 Description: A null pointer dereference issue has been identified in the Linux kernel, specifically in the drm/amd/display component. The issue arises when pointers, such as dc-clk mgr, are not properly...
CVE-2024-38856
creationtimestamp| type| source ---|---|--- 2024-06-17 15:39:13+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apacheofbizforgotpassworddirectorytraversal.rb 2024-08-05 11:10:43+00:00| published-proof-of-concept| https://t.me/HackingInsights/86...
Top 10 Critical Pentest Findings 2024: What You Need to Know
One of the most effective ways for information technology IT professionals to uncover a company's weaknesses before the bad guys do is penetration testing. By simulating real-world cyberattacks, penetration testing, sometimes called pentests, provides invaluable insights into an organization's...
Snowflake Recommends Customers Take Steps to Prevent Unauthorized Access
On June 2, Snowflake indicated a recent increase in cyber threat activity targeting customer accounts on its cloud data platform. Snowflake issued a recommendation for users to query for unusual activity and conduct further analysis to prevent unauthorized user access. Users and administrators ar...
DEBIAN-CVE-2023-52693
In the Linux kernel, the following vulnerability has been resolved: ACPI: video: check for error while searching for backlight device parent If acpigetparent called in acpivideodevregisterbacklight fails, for example, because acpiutacquiremutex fails inside acpigetparent, this can lead to incorre...
CVE-2023-47357
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2022-38037
creationtimestamp| type| source ---|---|--- 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-12-19 18:03:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/12/the-windows-registry-adventure-5-regf.html 2025-05-23...
PT-2024-32151
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel, specifically in the drm/amd/display component. It involves checking the index for aux rd interval before using it, as aux rd interval has a size...
CVE-2024-26896 wifi: wfx: fix memory leak when starting AP
In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix memory leak when starting AP Kmemleak reported this error: unreferenced object 0xd73d1180 size 184: comm "wpasupplicant", pid 1559, jiffies 13006305 age 964.245s hex dump first 32 bytes: 00 00 00 00 00 00 00 00 00 ...
CVE-2024-23082
ThreeTen Backport v1.6.8 was discovered to contain an integer overflow via the component org.threeten.bp.format.DateTimeFormatter::parseCharSequence, ParsePosition. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a...
PT-2024-21942 · Undefined · Undefined
Hey everyone, I don’t actually publicly share my findings/achievements, but wanted to make a change. So as an update I got the confirmation on my 2xCVEs. CVE-2024-27555 CVE-2024-27556 I hope to get these officially publicized soon so they are no longer "reserved" BugBounty...
PT-2024-21943 · Undefined · Undefined
Hey everyone, I don’t actually publicly share my findings/achievements, but wanted to make a change. So as an update I got the confirmation on my 2xCVEs. CVE-2024-27555 CVE-2024-27556 I hope to get these officially publicized soon so they are no longer "reserved" BugBounty...