21774 matches found
ALSA-2023:0096 Moderate: dbus security update
D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility. Security Fixes: dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets...
AMD System Management Unit(SMU) 输入验证错误漏洞
The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. A security vulnerability exists in AMD System Management Unit SMU that stems from insufficient input validation of BIOS mailbox messages, which could lead to an out-of-bounds memory read that could result...
StrongPity Hackers Distribute Trojanized Telegram App to Target Android Users
The advanced persistent threat APT group known as StrongPity has targeted Android users with a trojanized version of the Telegram app through a fake website that impersonates a video chat service called Shagle. "A copycat website, mimicking the Shagle service, is used to distribute StrongPity's...
PT-2023-1019 · Schneider Electric · Ecostruxure Geo Scada Expert +1
Name of the Vulnerable Software and Affected Versions: EcoStruxure Geo SCADA Expert versions 2019 through 2021 prior to October 2022 ClearSCADA versions prior to the fixed version Description: A vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific...
Inside Secure MatrixSSL 输入验证错误漏洞
Inside Secure MatrixSSL is an embedded, open-source SSLv3 stack designed for small applications and devices from Inside Secure, France. A security vulnerability exists in MatrixSSL versions 4.0.4 through 4.5.1 that stems from an integer overflow in matrixSslDecodeTls13. An attacker could exploit...
Ubuntu: Security Advisory (USN-5794-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2023-1617 · Qualcomm · Qualcomm Embedded Platform
Name of the Vulnerable Software and Affected Versions: Powerline Communication Firmware affected versions not specified Qualcomm embedded platform software affected versions not specified Description: The issue is related to memory corruption due to information exposure in Powerline Communication...
CVE-2023-22626
PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. Depending on database user privileges, this may only be information from the database, or may be information from file contents on the database server...
PgHero 安全漏洞
PgHero is a performance dashboard for Postgres by Andrew Kane, an individual developer. A security vulnerability exists in versions of PgHero prior to 3.1.0 that stems from a malicious PgHero user being able to use the EXPLAIN function to extract data from a database and pass certain inputs, whic...
PT-2023-13718 · Unem +1 · Unem +1
Name of the Vulnerable Software and Affected Versions: FOXMAN-UN versions R9C through R15B UNEM versions R9C through R15B Description: The issue affects the communication between the client and the server application of the affected products, which is partially done using CORBA Common Object...
ansible-ntp 安全漏洞
ansible-ntp is managing time synchronization, NTP servers and time zones. A security vulnerability exists in ansible-ntp that stems from insufficient control over the amount of network messages...
UBUNTU-CVE-2022-47952
lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because "Failed to open" often indicates that a file does not exist, whereas "does not refer to a network namespace path" often indicates...
Mozilla Firefox Security Feature Issue Vulnerability (CNVD-2023-05209)
Mozilla Firefox is an open source Web browser from the Mozilla Foundation. Mozilla Firefox is vulnerable to a security feature issue that stems from a vulnerability related to compromised keys in the OpenPGP revocation mechanism. A remote attacker could use the revoked key to sign messages, which...
ROS-20221229-02
A vulnerability in the Mozilla Firefox browser is related to the fact that a process can partially exit the sandbox and read arbitrary files using IPC messages associated with the clipboard. Exploitation of the of the vulnerability could allow an attacker acting remotely to open a given source an...
memos 安全漏洞
memos is an open source hosted meme center with knowledge management and social features. A security vulnerability exists in memos, which can be exploited by an attacker to post messages in the memos page...
ROS-20221229-03
A vulnerability in the Mozilla Thunderbird email client is related to the fact that a process can partially exit the sandbox and read arbitrary files using IPC messages associated with the clipboard. Exploitation of the vulnerability could allow an attacker acting remotely to open a given source...
shiyanhui/dht vulnerable to Uncontrolled Resource Consumption
Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of service vector...
GHSA-P6FG-723F-HGPW shiyanhui/dht vulnerable to Uncontrolled Resource Consumption
Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of service vector...
