1828 matches found
About the security content of iOS 15.3 and iPadOS 15.3
About the security content of iOS 15.3 and iPadOS 15.3 This document describes the security content of iOS 15.3 and iPadOS 15.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...
Vulnerabilities in permissions and access controls of various Apple products
Apple tvOS and others are products of Apple, Inc. Apple tvOS is a smart TV operating system. tvOS is a smart TV operating system. apple watchOS is a smart watch operating system. A vulnerability exists in a number of Apple products with privilege permission and access control issues, which stems...
About the security content of tvOS 15.3
About the security content of tvOS 15.3 This document describes the security content of tvOS 15.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of watchOS 8.4
About the security content of watchOS 8.4 This document describes the security content of watchOS 8.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
org.jenkins-ci.main:jenkins-test-harness (1.623), org.jenkins-ci.main:jenkins-war (1.623) +2 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.623)
org.jenkins-ci.main:jenkins-core MAVEN version 1.623 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.623 - org.jenkins-ci.main:jenkins-war 1.623 -...
GSD-2022-1000045 net/mlx5e: Wrap the tx reporter dump callback to extract the sq
net/mlx5e: Wrap the tx reporter dump callback to extract the sq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.90 by commit...
PT-2022-28336
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.90 Description The issue is related to the net/mlx5e component, specifically with wrapping the tx reporter dump callback to extract the sq. The actual impact and attack plausibility have not yet been proven...
PT-2022-28348
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.13 Description The issue is related to the net/mlx5e component, specifically with wrapping the tx reporter dump callback to extract the sq. The actual impact and attack plausibility have not yet been proven...
Happy 12th Birthday, KrebsOnSecurity.com!
KrebsOnSecurity.com celebrates its 12th anniversary today! Maybe "celebrate" is too indelicate a word for a year wracked by the global pandemics of COVID-19 and ransomware. Especially since stories about both have helped to grow the audience here tremendously in 2021. But this sites birthday also...
PT-2021-8079 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel version 5.13.0 mlnx Description: The vulnerability is related to the function mlx5e tx reporter dump sq in the net/mlx5e component of the Linux kernel. This function casts its void argument to struct mlx5e txqsq , but in the...
About the security content of tvOS 15.2
About the security content of tvOS 15.2 This document describes the security content of tvOS 15.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of watchOS 8.3
About the security content of watchOS 8.3 This document describes the security content of watchOS 8.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of iOS 15.2 and iPadOS 15.2
About the security content of iOS 15.2 and iPadOS 15.2 This document describes the security content of iOS 15.2 and iPadOS 15.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...
gossip-object (>=1.0.6, <=2.3.4), gossipdb (>=0.1.1, <=0.1.5) +2 more potentially affected by CVE-2020-7644 via fun-map (3.3.1)
fun-map NPM version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on fun-map and may be impacted: - gossip-object =1.0.6, =0.1.1, =0.0.0, =0.2.0, =1.0.0 Source cves: CVE-2020-7644 Source advisory: GHSA-P33M-7W7F-GMJ8...
Mozilla Firefox Security Advisory (MFSA2014-24) - Deprecated
This host is missing a security update for Mozilla Firefox. This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Missouri Governor Doesn’t Understand Responsible Disclosure
The Missouri governor wants to prosecute the reporter who discovered a security vulnerability in a states website, and then reported it to the state. The newspaper agreed to hold off publishing any story while the department fixed the problem and protected the private information of teachers arou...
tynker.com Cross Site Scripting vulnerability OBB-2146429
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Inefficient Regular Expression Complexity in tapjs/tap-mocha-reporter
Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in tap-mocha-reporter. The ReDoS vulnerability is mainly due to the regex /^\s+|\s+$|/g and can be exploited with the following code. Proof of Concept // PoC.js var tapMochaReporter =...
jubf.net Cross Site Scripting vulnerability OBB-2142824
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
care-old.com Cross Site Scripting vulnerability OBB-2139133
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...