1264 matches found
GSD-2023-1001299 eventpoll: add EPOLL_URING_WAKE poll wakeup flag
eventpoll: add EPOLLURINGWAKE poll wakeup flag This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.162 by commit...
DLA-3271-1 node-minimatch - security update
Bulletin has no description...
DSA-5319-1 openvswitch - security update
Bulletin has no description...
Information Cards Module vulnerable to Cross-site Scripting
A vulnerability was found in Information Cards Module and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 1.0 is able to address this issue. The name of the patch is...
GHSA-R894-5R7V-7RX3 easy-scrypt Observable Timing Discrepancy vulnerability
A vulnerability, which was classified as problematic, was found in agnivade easy-scrypt. Affected is the function VerifyPassphrase of the file scrypt.go. The manipulation leads to observable timing discrepancy. Upgrading to version 1.0.0 can address this issue. The name of the patch is...
DLA-3256-1 xorg-server - security update
Bulletin has no description...
DLA-3253-1 openvswitch - security update
Bulletin has no description...
DSA-5306-1 gerbv - security update
Bulletin has no description...
Unspecified Vulnerability in ZOHO ManageEngine Device Control Plus
ZOHO ManageEngine Device Control Plus is a USB device control software from ZOHO USA. It is used to control, block and monitor all removable devices connected to the computer. A security vulnerability exists in ZOHO ManageEngine Device Control Plus version 10.1.2228.15 that originates from the...
DSA-5305-1 libksba - security update
Bulletin has no description...
DSA-5301-1 firefox-esr - security update
Bulletin has no description...
DLA-3236-1 openexr - security update
Bulletin has no description...
DLA-3233-1 leptonlib - security update
Bulletin has no description...
PT-2022-21941 · Intel · Intel Wapi Security
Name of the Vulnerable Software and Affected Versions: IntelR WAPI Security software for Windows 10/11 versions prior to 22.2150.0.1 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable information disclosure via local access...
DSA-5267-1 pysha3 - security update
Bulletin has no description...
DLA-3164-1 python-django - security update
Bulletin has no description...
Point-of-sale malware used to steal 167,000 credit cards
In the 19 months between February 2021 and September 2022, two point-of-sale POS malware operators have stolen more than 167,000 payment records, mainly from the US, according to researchers at Group-IB. The researchers were able to retrieve information about infected machines and compromised...
