12156 matches found
MAL-2022-102 Malicious code in @azure-tests/perf-event-hubs-track-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f33365f9f452d71317e4ca23088d8eb0525f77ec6bb5fb923d01ebf81efa4f4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE: Security Advisory (SUSE-SU-2022:2107-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
spirv-tools:spvtools_opt_performance_fuzzer: Stack-buffer-overflow in spvtools::opt::CompositeInsertToCompositeConstruct
Project: https://github.com/KhronosGroup/SPIRV-Tools.git Detailed Report: https://oss-fuzz.com/testcase?key=5652264460615680 Project: spirv-tools Fuzzing Engine: libFuzzer Fuzz Target: spvtoolsoptperformancefuzzer Job Type: libfuzzerasani386spirv-tools Platform Id: linux Crash Type:...
CVE-2022-24436
A potential vulnerability in some Intel® processors using frequency scaling may allow an authenticated attacker to execute a timing attack to potentially enable information disclosure. Mitigation Currently, there is no mitigation for this flaw. Intel has provided some guidance to developers of...
SUSE: Security Advisory (SUSE-SU-2022:2072-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2022:2070-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Unbreakable Enterprise kernel-container security update
4.14.35-2047.514.3.el7 - uek-rpm: Update OL7 SecureBoot certificate files Saeed Mirzamohammadi Orabug: 34219958 4.14.35-2047.514.2 - perf: Fix sysperfeventopen race against self Peter Zijlstra Orabug: 34207044 CVE-2022-1729 - debug: Lock down kgdb Stephen Brennan Orabug: 34207043 CVE-2022-21499...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10005-1 Rating: important References: 1199893 Cross-References: CVE-2022-1853 CVE-2022-1854 CVE-2022-1855 CVE-2022-1856 CVE-2022-1857 CVE-2022-1858 CVE-2022-1859 CVE-2022-1860 CVE-2022-1861 CVE-2022-1862...
Security update for chromium (critical)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10009-1 Rating: critical References: 1199893 1200139 1200423 Cross-References: CVE-2022-1853 CVE-2022-1854 CVE-2022-1855 CVE-2022-1856 CVE-2022-1857 CVE-2022-1858 CVE-2022-1859 CVE-2022-1860 CVE-2022-1861...
OESA-2022-1705 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: There are use-after-free vulnerabilities in net/ax25/afax25.c of linux that allow attacker to crash linux kernel by simulating ax25 device from user space.CVE-2022-1204 The Linux kernel before 5.17.2 mishandles seccomp permission...
SUSE: Security Advisory (SUSE-SU-2022:2029-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-29227 Use after free in Envoy
Envoy is a cloud-native high-performance edge/middle/service proxy. In versions prior to 1.22.1 if Envoy attempts to send an internal redirect of an HTTP request consisting of more than HTTP headers, there’s a lifetime bug which can be triggered. If while replaying the request Envoy sends a local...
Ubuntu: Security Advisory (USN-5474-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Performance Manager Component Code Execution
The vulnerability of the Performance Manager component in Google Chrome browser relates to the use of memory after it is released. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code using a specially created web page...
dbus-broker-29 Memory Corruption
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Memory Corruption Vulnerabilities product: dbus-broker vulnerable version: dbus-broker-29 fixed version: dbus-broker-31 CVE number: CVE-2022-31212, CVE-2022-3121...
[SECURITY] Fedora 36 Update: firefox-101.0-1.fc36
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
SUSE: Security Advisory (SUSE-SU-2022:1920-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CLSA-2022-1654175851 Fixed CVE-2021-25219 in bind
CVE-2021-25219: fix possible performance degradation by disabling lame-ttl cache...
Netscout NgeniusOne code-related vulnerabilities
Netscout NgeniusOne is a centralized application management and network performance solution from Netscout, Inc. A security vulnerability exists in Netscout NgeniusOne version 6.3.2, which can be exploited by attackers to launch XML External Entity XXE attacks...
CVE-2022-29243
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 22.2.7 and 23.0.4, missing input-size validation of new session names allows users to create app passwords with long names. These long names are then loaded into memory on usage,...