How Card Skimming Disproportionally Affects Those Most In Need

When people banking in the United States lose money because their payment card got skimmed at an ATM, gas pump or grocery store checkout terminal, they may face hassles or delays in recovering any lost funds, but they are almost always made whole by their financial institution. Yet, one class of...

CVE-2022-3303 affecting package kernel for versions less than 5.15.70.1-1

CVE-2022-3303 affecting package kernel for versions less than 5.15.70.1-1. A patched version of the package is available...

CVE-2021-33655 affecting package kernel for versions less than 5.15.67.1-4

CVE-2021-33655 affecting package kernel for versions less than 5.15.67.1-4. A patched version of the package is available...

CVE-2022-40476 affecting package kernel for versions less than 5.15.67.1-4

CVE-2022-40476 affecting package kernel for versions less than 5.15.67.1-4. An upgraded version of the package is available that resolves this issue...

CVE-2022-2380 affecting package kernel for versions less than 5.15.67.1-4

CVE-2022-2380 affecting package kernel for versions less than 5.15.67.1-4. A patched version of the package is available...

CVE-2022-39190 affecting package kernel for versions less than 5.15.67.1-4

CVE-2022-39190 affecting package kernel for versions less than 5.15.67.1-4. A patched version of the package is available...

CVE-2022-2625 affecting package postgresql for versions less than 14.5-1

CVE-2022-2625 affecting package postgresql for versions less than 14.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1552 affecting package postgresql for versions less than 14.5-1

CVE-2022-1552 affecting package postgresql for versions less than 14.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3234 affecting package vim for versions less than 9.0.0490-1

CVE-2022-3234 affecting package vim for versions less than 9.0.0490-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3099 affecting package vim for versions less than 9.0.0490-1

CVE-2022-3099 affecting package vim for versions less than 9.0.0490-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2889 affecting package vim for versions less than 9.0.0325-1

CVE-2022-2889 affecting package vim for versions less than 9.0.0325-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2845 affecting package vim for versions less than 9.0.0325-1

CVE-2022-2845 affecting package vim for versions less than 9.0.0325-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2923 affecting package vim for versions less than 9.0.0325-1

CVE-2022-2923 affecting package vim for versions less than 9.0.0325-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2580 affecting package vim for versions less than 9.0.0325-1

CVE-2022-2580 affecting package vim for versions less than 9.0.0325-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2862 affecting package vim for versions less than 9.0.0325-1

CVE-2022-2862 affecting package vim for versions less than 9.0.0325-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-32212 affecting package nodejs for versions less than 16.20.2-4

CVE-2022-32212 affecting package nodejs for versions less than 16.20.2-4. An upgraded version of the package is available that resolves this issue...

CVE-2020-25657 affecting package m2crypto for versions less than 0.38.0-3

CVE-2020-25657 affecting package m2crypto for versions less than 0.38.0-3. A patched version of the package is available...

Keycloak allows anyone to register new security device or key for any user by using WebAuthn password-less login flow

A flaw was found in Keycloak. This vulnerability allows anyone to register a new security device or key when there is not a device already registered for any user by using the WebAuthn password-less login flow...

GHSA-QPQ9-JPV4-6GWR Keycloak allows anyone to register new security device or key for any user by using WebAuthn password-less login flow

A flaw was found in Keycloak. This vulnerability allows anyone to register a new security device or key when there is not a device already registered for any user by using the WebAuthn password-less login flow...

CVE-2021-3632

CVE-2021-3632 is a Keycloak/WebAuthn flow flaw that allows an attacker to register a new security device or key for any user when no device exists for that user. The issue is present in Red Hat SSO 7.x as part of the 7.4.9 security updates; Red Hat advisories RHSA-2021:3527/3528/3529 list the fix...