PT-2022-10040 · Stormshield · Stormshield Network Security

Name of the Vulnerable Software and Affected Versions: Stormshield Network Security SNS versions 1.0.0 through 2.7.8 Stormshield Network Security SNS versions 2.8.0 through 2.16.0 Stormshield Network Security SNS versions 3.0.0 through 3.7.20 Stormshield Network Security SNS versions 3.8.0 throug...

Debian DSA-5061-1 : wpewebkit - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5061 advisory. The following vulnerabilities have been discovered in the wpewebkit web engine: CVE-2021-30934 Dani Biro discovered that processing maliciously crafted web conten...

Stormshield Network Security 缓冲区错误漏洞

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from the French company Stormshield. A buffer error vulnerability exists in Stormshield Network Security that stems from a failure to properly handle errors in memory management in the product's ASQ. An...

Fedora: Security Advisory for lua (FEDORA-2022-93f064549c)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Ubuntu 20.04 LTS : WebKitGTK vulnerabilities (USN-5255-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5255-1 advisory. A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a...

Mageia: Security Advisory (MGASA-2014-0314)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : qemu (EulerOS-SA-2022-1034)

According to the versions of the qemu package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The ahcicommitbuf function in ide/ahci.c in QEMU allows attackers to cause a denial of service NULL dereference when the command header 'ad-curcmd'...

EulerOS 2.0 SP9 : qemu (EulerOS-SA-2022-1014)

According to the versions of the qemu package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The ahcicommitbuf function in ide/ahci.c in QEMU allows attackers to cause a denial of service NULL dereference when the command header 'ad-curcmd'...

CVE-2021-46510

There is an Assertion s ownedstrings.buf + mjs-ownedstrings.len' failed at src/mjsgc.c in Cesanta MJS v2.20.0...

CVE-2021-30951

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30936

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution...

UBUNTU-CVE-2021-30951

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution...

CTF-All-In-One

This is a comprehensive guide to CTF Capture The Flag competitions, specifically focusing on the Pwn binary exploitation aspect. The book is written by Yang Cheng, a member of L-Team, and is intended for beginners. It covers the basics of binary exploitation, including memory management, buffer...

DEBIAN-CVE-2022-23034

A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU enabled. PV guests can request two forms of mappings. When both are in use for any individual mapping, unmapping of such a...

DEBIAN-CVE-2022-23033

arm: guestphysmapremovepage not removing the p2m mappings The functions to remove one or more entries from a guest p2m pagetable on Arm p2mremovemapping, guestphysmapremovepage, and p2msetentry with mfn set to INVALIDMFN do not actually clear the pagetable entry if the entry doesn't have the vali...

The vulnerability of the program tools and libraries used for working with OpenSC smart cards involves improper memory release before deleting the last pointer, allowing a malicious actor to cause a service failure.

The vulnerability of the programmatic tools and libraries used to work with OpenSC smart cards is related to improper memory release before deleting the last references. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. a code issue vulnerability exists in GPAC, which stems from multiple memory releases by the gftextgetutf8line function in the product loadtext.c file. An attacker could cause a denial of service or even code execution and privilege escalation through...

UBUNTU-CVE-2021-46141

An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMakeOwner...

CVE-2021-45960

In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory...

PT-2025-8061

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue has been identified in the Linux kernel, specifically in the drm/amdkfd component. The problem occurs when the svm range restore work is flushed during process exit,...