AZL-8604 CVE-2022-25236 affecting package expat for versions less than 2.4.8-1

xmlparse.c in Expat aka libexpat before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs...

UBUNTU-CVE-2022-25236

xmlparse.c in Expat aka libexpat before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs...

UBUNTU-CVE-2020-13670

Information Disclosure vulnerability in file module of Drupal Core allows an attacker to gain access to the file metadata of a permanent private file that they do not have access to by guessing the ID of the file. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10; 8.9.x versions prio...

CVE-2021-37856

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none...

CVE-2021-20015

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none...

CVE-2021-20012

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none...

CVE-2021-20010

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none...

Multi-vendor BIOS Security Vulnerabilities (February 2022) - Lenovo Support US

No description provided...

CVE-2022-0498

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2021-44141

creationtimestamp| type| source ---|---|--- 2022-02-01 18:07:20+00:00| seen| https://t.me/itsecalert/136 2022-02-21 20:11:42+00:00| seen| https://t.me/cibsecurity/37874...

Chromium, Google Chrome: Multiple vulnerabilities

Background Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one, fast, simple, and secure browser for all your devices. Description Multiple vulnerabilities have been discovered in Chromium and...

Cvx3CrvOracle.sol _peek() returns wrong units

Handle sirhashalot Vulnerability details Impact The Cvx3CrvOracle.sol contract claims it "provides current values for Cvx3Crv". When getting the current values, "only cvx3crvid and ethId are accepted as asset identifiers" for the base and quote parameters to the peek and get functions. peek and g...

Mageia: Security Advisory (MGASA-2014-0293)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-44121

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2021-44692

BuddyBoss Platform through 1.8.0 allows remote attackers to obtain the email address of each user. When creating a new user, it generates a Unique ID for their profile. This UID is their private email address with symbols removed and periods replaced with hyphens. For example. [email protected]...

OPENSUSE-SU-2022:0019-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 97.0.4692.99 boo1194919: CVE-2022-0289: Use after free in Safe browsing CVE-2022-0290: Use after free in Site isolation CVE-2022-0291: Inappropriate implementation in Storage CVE-2022-0292: Inappropriate implementation in Fenced Frames...

GLSA-202105-33 : containerd: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202105-33 containerd: Multiple vulnerabilities Multiple vulnerabilities have been discovered in containerd. Please review the CVE identifiers referenced below for details. Impact : A local attacker, able to run a malicious contain...

CVE-2021-26045

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none...

CVE-2021-26048

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none...

Bug in Safari browser leaks personal identifiers and browsing activity

By Deeba Ahmed The bug affects the Safari 15 browser for Mac and all versions of Safari on iOS 15 and… This is a post from HackRead.com Read the original post: Bug in Safari browser leaks personal identifiers and browsing activity...