New UFEI Rootkit

Kaspersky is reporting on a new UFEI rootkit that survives reinstalling the operating system and replacing the hard drive. From an article: The firmware compromises the UEFI, the low-level and highly opaque chain of firmware required to boot up nearly every modern computer. As the software that...

CVE-2022-30621 Cellinx NVT – IP PTZ Camera local file inclusion

Allows a remote user to read files on the camera's OS "GetFileContent.cgi". Reading arbitrary files on the camera's OS as root user...

CVE-2022-32212

CVE-2022-32212 is a Node.js OS Command Injection due to an insufficient IsAllowedHost validation, enabling rebinding attacks. Affected versions are Node.js <14.20.0, <16.20.0, and

June 14, 2022—KB5014697 (OS Build 22000.739)

None None...

Important Photon OS Security Update - PHSA-2022-0192

Updates of 'ncurses' packages of Photon OS have been released...

frr bug fix and enhancement update

An update is available for frr. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.6...

Security Bulletin: Publicly disclosed vulnerability (CVE-2021-4034) in Polkit affects IBM Netezza PDA OS Security

Summary Polkit is shipped with PDA OS Security kits. This Bulletin provides mitigation for the reported CVE Vulnerability Details CVEID: CVE-2021-4034 DESCRIPTION: Polkit could allow a local authenticated attacker to gain elevated privileges on the system, caused by incorrect handling of the...

November 9, 2021—KB5007206 (OS Build 17763.2300)

None None...

Important Photon OS Security Update - PHSA-2021-4.0-0112

Updates of 'kubernetes' packages of Photon OS have been released...

ROS-2-985

2.985 Denial of Service in Libxml2 CVE-2021-3541 1. Vulnerability Description: The vulnerability allows a remote attacker to perform a denial of service DoS attack. The vulnerability exists due to insufficient validation of user input. A remote attacker can pass specially crafted input data to an...

Important Photon OS Security Update - PHSA-2021-0084

Updates of 'ruby' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2021-0424

Updates of 'util-linux' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-0036

Updates of 'apache-ant' packages of Photon OS have been released...

Unnamed Vulnerability in Juniper Networks Junos OS (CNVD-2021-37737)

Juniper Networks Junos OS is a Juniper Networks network operating system designed for use with Juniper Networks hardware devices. The operating system provides a secure programming interface and the Junos SDK.Junos OS Evolved is an upgraded version of Junos OS. Junos OS has a security...

Moderate Photon OS Security Update - PHSA-2021-0230

Updates of 'binutils' packages of Photon OS have been released...

Arbitrary Code Execution

u-boot is vulnerable to arbitrary ry code execution. The boot loader in Das U-Boot mishandles a modified FIT and allows an attacker to execute arbitrary code on the host OS...

Arbitrary Command Execution

ffmpegdotjs is vulnerable to arbitrary command execution. Untrusted user input is passed into the trimvideo function and subsequently parsed in exec function. This allows an attacker to execute arbitrary commands on the host OS...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2021-29875)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Junos OS has a security vulnerability, and no details of the vulnerability are available at this time...

SYS.2.3.A18

Es SOLLTEN mit speziell gehaerteten Kernels z. B. grsecurity, PaX geeignete Schutzmassnahmen wie Speicherschutz, Dateisystemabsicherung und rollenbasierte Zugriffskontrolle umgesetzt werden, die eine Ausnutzung von Schwachstellen und die Ausbreitung im Betriebssystem verhindern...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A use after free flaw in the WebGL component allows an attacker to execute arbitrary code on the host OS...