3202 matches found
4 Major Benefits of Next Gen SIEM
By Owais Sultan Next gen SIEM is a cloud-native cyberscurity tool that utilizes artificial intelligence and machine learning to discover malicious activity in real-time. This is a post from HackRead.com Read the original post: 4 Major Benefits of Next Gen SIEM...
Security Bulletin: The IBM® Engineering Lifecycle Management products recommendation for Denial of Service due to Neko HTML in WebSphere Application Server Liberty (CVE-2022-24839)
Summary The IBM® Engineering Lifecycle Management products on WebSphere Application Server Liberty versions 17.0.0.3 - 22.0.0.10, vulnerbale to Denial of Service due to Neko HTML CVE-2022-24839. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected...
Malicious code in waffles-next-doc-site (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8d0d50f724e914440d501dc63fdc4d2a16d56acc44921cedd418cb25aa1508a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7031 Malicious code in waffles-next-doc-site (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8d0d50f724e914440d501dc63fdc4d2a16d56acc44921cedd418cb25aa1508a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-43677
In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...
Security Bulletin: The IBM® Engineering Lifecycle Management products recommendation for IBM Java XML vulnerability CVE-2022-21299
Summary A flaw in the XML component allows attackers to inflict a denial-of-service and/or access external entities which should be inaccessible. Vulnerability is identified in Java versions 7.0.11.5 and earlier, 7.1.5.5 and earlier, 8.0.7.5 and earlier. Vulnerability Details Refer to the securit...
Security Bulletin: The IBM® Engineering Lifecycle Management products recommendation for Java CPU CVE-2021-35561
Summary Java version 7.0.11.5 and earlier, 7.1.5.5 and earlier, 8.0.7.6 and earlier are affected by a flaw in the java.util component allows an attacker to inflict a denial of service via malicious serialized data which triggers an OutOfMemoryError. Vulnerability Details Refer to the security...
PT-2022-14639 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to an incorrect bounds check in the fdt next tag function of fdt.c, which could lead to a possible out of bounds read. This could result in local escalation of...
Linux kernel 缓冲区错误漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation. A buffer error vulnerability exists in the Linux kernel that stems from an out-of-bounds read in the fibnhmatch function in the net/ipv4/fibsemantics.c file of the IPv4 Handler component...
Upstash Adapter missing token verification
Impact Applications that use next-auth Email Provider and @next-auth/upstash-redis-adapter before v3.0.2 are affected. Description The Upstash Redis adapter implementation did not check for both the identifier email and the token, but only checking for the identifier when verifying the token in t...
GHSA-4RXR-27MM-MXQ9 Upstash Adapter missing token verification
Impact Applications that use next-auth Email Provider and @next-auth/upstash-redis-adapter before v3.0.2 are affected. Description The Upstash Redis adapter implementation did not check for both the identifier email and the token, but only checking for the identifier when verifying the token in t...
OSV-2022-981 Heap-buffer-overflow in SkPath::Iter::next
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51915 Crash type: Heap-buffer-overflow READ 8 Crash state: SkPath::Iter::next SkStroke::strokePath SkStrokeRec::applyToPath...
OSV-2022-978 Heap-buffer-overflow in SkPath::Iter::next
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51926 Crash type: Heap-buffer-overflow READ 8 Crash state: SkPath::Iter::next SkPath1DPathEffectImpl::next Sk1DPathEffect::onFilterPath...
OSV-2022-976 Heap-buffer-overflow in SkPath::Iter::next
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51925 Crash type: Heap-buffer-overflow READ 8 Crash state: SkPath::Iter::next SkParsePath::ToSVGString SkSVGDevice::drawPath...
PT-2022-37319 · Git +1 · Skia
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the SkPath::Iter::next function, SkStroke::strokePat...
OSV-2022-969 Heap-buffer-overflow in SkPath::Iter::next
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51875 Crash type: Heap-buffer-overflow READ 8 Crash state: SkPath::Iter::next SkRegion::setPath SkRasterClip::SkRasterClip...
PT-2022-37313 · Git +1 · Skia
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the SkPath::Iter::next function, SkRegion::setPath...
Intel NUC M15 缓冲区错误漏洞
Intel NUC M15 is a laptop kit from Intel Corporation USA. A security vulnerability exists in previous versions of the Intel NUC M15 Laptop Kit BC0076, which stems from an elevation of privilege, executing arbitrary code in System Management Mode, and running arbitrary code in SMM will also bypass...
Medtronic NGP 600 Series 安全漏洞
The Medtronic NGP 600 Series is a line of insulin pumps and accessories from Medtronic, Inc. A security vulnerability exists in Medtronic NGP 600 Series version 2.4, which originates from the exploitation of wireless signals that require proximity to the patient and the device. The following...