2048 matches found
CVE-2005-2017
Symantec AntiVirus 9 Corporate Edition allows local users to gain privileges via the "Scan for viruses" option, which launches a help window with raised privileges, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2002-1540...
TechniqueRAG: Retrieval Augmented Generation for Adversarial Technique Annotation in Cyber Threat Intelligence Text
Accurately identifying adversarial techniques in security texts is critical for effective cyber defense. However, existing methods face a fundamental trade-off: they either rely on generic models with limited domain precision or require resource-intensive pipelines that depend on large labeled...
The vulnerability of Elber Communications Equipment’s software products lies in their ability to bypass the authentication process by using an alternative path or channel. This allows attackers to circumvent the authentication procedures.
The vulnerability of Elber Communications Equipment’ software products relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent the authentication process and re-register user credentials...
Security update for augeas
This update for augeas fixes the following issues: CVE-2025-2588: Check for NULL pointers when calling recaseexpand in function faexpandnocase. bsc1239909 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
ROS-20250430-02
A vulnerability in the libavformat/westwoodvqa.c component of the FFmpeg multimedia library is related to an integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely, cause a denial of service using a specially crafted VQA file FFmpeg multimedia library...
Malicious code in @baywa-re-lusy/nsemea-salestransaction-lib-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9605e1f17bd8907425f5176a55ff40f7f9ffc6c94912d17c753f3fdb34361caf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in @baywa-re-lusy/nsemea-alias-lib-poc
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @baywa-re-lusy/nsemea-address-lib-poc
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @baywa-re-lusy/nsemea-quote-lib-poc
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @baywa-re-lusy/nsemea-core-poc
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @baywa-re-lusy/nsemea-customer-lib-poc
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @baywa-re-lusy/nsemea-salestransaction-lib-poc
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in @baywa-re-lusy/nsemea-core-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd59217d2262d20a36701378b6fc7047b8f1a20c638f6aaaf18af11316648ee8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3517 Malicious code in @baywa-re-lusy/nsemea-salestransaction-lib-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9605e1f17bd8907425f5176a55ff40f7f9ffc6c94912d17c753f3fdb34361caf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Memory release followed by re-exploitation vulnerability in several Apple products
visionOS is an AR eyewear system announced by Apple on June 6, 2023 at the 2023 Apple Worldwide Developers Conference, which will be featured for the first time in the Apple Vision Pro. tvOS is an iOS-based television operating system developed by Apple. watchOS is a set of watch operating system...
Citrix DaaS | Workspace expiration period forced Users to re-authenticate
When the user logs in to workspace URL, they are unexpected behavior while using CWA. -They will be prompted to keep themselves logged in due to a Inactive policy set. -Once they select keep me logged in, the workspace page gets refreshed and they don't see any apps or desktops...
The vulnerability of the dfx regs uninit() function in the Linux operating system’s drivers/crypto/hisilicon/debugfs.c file allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the dfx regsuninit function in the Linux operating system’s drivers/crypto/hisilicon/debugfs.c file relates to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...
CVE-2024-43046
There may be information disclosure during memory re-allocation in TZ Secure OS...