Lucene search
+L

922 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/07/02 8:37 a.m.•16 views

Malicious code in azure-sentinel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37e43a68053a45c1fcdea9e752fd9c13f6906e780ab5b8ff5436b3f1b5533d18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2025/07/02 8:37 a.m.•14 views

MAL-2025-5541 Malicious code in azure-sentinel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37e43a68053a45c1fcdea9e752fd9c13f6906e780ab5b8ff5436b3f1b5533d18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/07/02 8:37 a.m.•4 views

Malware in azure-sentinel

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Microsoft Secure
Microsoft Secure
•added 2025/07/01 5:00 p.m.•21 views

Planning your move to Microsoft Defender portal for all Microsoft Sentinel customers

In November 2023, Microsoft announced our strategy to unify security operations by bringing the best of XDR and SIEM together. Our first step was bringing Microsoft Sentinel into the Defender portal, giving teams a single, comprehensive view of incidents, reducing queue management, enriched threa...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/06/29 12:00 a.m.•20 views

PT-2025-33594

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue in the AXP717 ADC channel maps where a sentinel entry is missing. This causes a KASAN warning. Adding the missing sentinel entry resolves the issue...

7.3CVSS6.3AI score0.00158EPSS
SaveExploits0
Microsoft Secure
Microsoft Secure
•added 2025/06/24 4:00 p.m.•26 views

Microsoft is named a Leader in The Forrester Wave™: Security Analytics Platforms, 2025​​

What is a security operations center? Learn more ↗ Microsoft is proud to be named a Leader in The Forrester Wave™: Security Analytics Platforms, Q2 2025—which we believe reflects our deep investment in innovation and commitment to support security operations centers SOCs’s critical mission. This...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/06/24 12:00 a.m.•19 views

PT-2025-34416

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A NULL pointer dereference issue was resolved in the pinctrl subsystem for Canaan K230 devices. The vulnerability occurs when retrieving the "pinmux" property from the device tree node...

9.8CVSS6.1AI score0.11885EPSS
SaveExploits2References233
SUSE CVE
SUSE CVE
•added 2025/06/19 3:45 a.m.•12 views

SUSE CVE-2022-49946

In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Prevent out-of-bounds access The while loop in raspberrypidiscoverclocks relies on the assumption that the id of the last clock element is zero. Because this data comes from the Videocore firmware and it doesn't...

5.5CVSS6.2AI score0.00232EPSS
SaveExploits0References9
NVD
NVD
•added 2025/06/18 11:15 a.m.•31 views

CVE-2022-49946

In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Prevent out-of-bounds access The while loop in raspberrypidiscoverclocks relies on the assumption that the id of the last clock element is zero. Because this data comes from the Videocore firmware and it doesn't...

7.1CVSS0.00232EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2025/06/18 11:15 a.m.•16 views

DEBIAN-CVE-2022-49946

In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Prevent out-of-bounds access The while loop in raspberrypidiscoverclocks relies on the assumption that the id of the last clock element is zero. Because this data comes from the Videocore firmware and it doesn't...

7.1CVSS5.4AI score0.00232EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/06/18 11:15 a.m.•21 views

UBUNTU-CVE-2022-49946

In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Prevent out-of-bounds access The while loop in raspberrypidiscoverclocks relies on the assumption that the id of the last clock element is zero. Because this data comes from the Videocore firmware and it doesn't...

7.1CVSS6AI score0.00232EPSS
SaveExploits0References6
CVE
CVE
•added 2025/06/18 11:00 a.m.•109 views

CVE-2022-49946

CVE-2022-49946 affects the Linux kernel component handling Raspberry Pi clocks (clk: bcm: rpi). The vulnerability arises in raspberrypi_discover_clocks() where the loop relies on the last clock element’s id being zero, a property not guaranteed by Videocore firmware, which could lead to an out-of...

7.1CVSS6.5AI score0.00232EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
•added 2025/06/18 12:00 a.m.•24 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the bcm rpi clock finding that the sentinel element is not handled correctly, which could lead to...

7.1CVSS6.4AI score0.00232EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/06/18 12:00 a.m.•25 views

PT-2025-25872 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the clk: bcm: rpi component. The issue arises from a while loop in the raspberrypi discover clocks function that...

7.8CVSS6.5AI score0.10202EPSS
SaveExploits18References577
RedhatCVE
RedhatCVE
•added 2025/05/23 12:28 a.m.•19 views

CVE-2022-48227

An issue was discovered in Acuant AsureID Sentinel before 5.2.149. It allows elevation of privileges because it opens Notepad after the installation of AssureID, Identify x64, and Identify x86, aka CORE-7361...

7.8CVSS7AI score0.00171EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 12:27 a.m.•24 views

CVE-2022-48228

An issue was discovered in Acuant AsureID Sentinel before 5.2.149. It uses the root of the C: drive for the i-Dentify and Sentinel Installer log files, aka CORE-7362...

5.5CVSS7AI score0.00187EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 11:40 p.m.•22 views

CVE-2022-21203

Improper permissions in the SafeNet Sentinel driver for IntelR QuartusR Prime Standard Edition before version 21.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7AI score0.00223EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:05 p.m.•19 views

CVE-2021-42809

Improper Access Control of Dynamically-Managed Code Resources DLL in Thales Sentinel Protection Installer could allow the execution of arbitrary code...

7.8CVSS7.3AI score0.00304EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 6:34 p.m.•25 views

CVE-2021-32928

The Sentinel LDK Run-Time Environment installer Versions 7.6 and prior adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networks using TCP Port 1947. While uninstalling, the uninstaller fails to close Port 1947...

9.8CVSS6.8AI score0.0125EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:29 a.m.•20 views

CVE-2019-19879

HashiCorp Sentinel up to 0.10.1 incorrectly parsed negation in certain policy expressions. Fixed in 0.10.2...

7.5CVSS6.9AI score0.01186EPSS
SaveExploits1References1
Rows per page
Query Builder