DSA-5099-1 tryton-proteus - security update

Bulletin has no description...

CVE-2022-24732 Maddy Mail Server does not implement account expiry

Maddy Mail Server is an open source SMTP compatible email server. Versions of maddy prior to 0.5.4 do not implement password expiry or account expiry checking when authenticating using PAM. Users are advised to upgrade. Users unable to upgrade should manually remove expired accounts via existing...

SUSE-SU-2022:0782-1 Security update for mariadb

This update for mariadb fixes the following issues: - Update to 10.2.43 bsc1196016: 10.2.43: CVE-2021-46665 CVE-2021-46664 CVE-2021-46661 CVE-2021-46668 CVE-2021-46663 10.2.42: CVE-2022-24052 CVE-2022-24051 CVE-2022-24050 CVE-2022-24048 CVE-2021-46659, bsc1195339 - The following issues have alrea...

2022-03 Cumulative Update for Windows 10 Version 1507 for x86-based Systems (KB5011491)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

PT-2022-16993 · Unknown · Apkinstaller

Name of the Vulnerable Software and Affected Versions: ApkInstaller versions prior to SMR MAR-2022 Release Description: The issue is related to improper access control in the dynamic receiver of ApkInstaller, allowing unauthorized attackers to execute arbitrary activities without proper permissio...

DLA-2938-1 twisted - security update

Bulletin has no description...

Security Bulletin: NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, Jetson TX1, Jetson TX2 Series (including Jetson TX2 NX), and Jetson Nano (including Jetson Nano 2GB) - March 2022

NVIDIA has released a software update for NVIDIA® Jetson AGX Xavier™ series, Jetson Xavier™ NX, Jetson TX1, Jetson TX2 series including Jetson TX2 NX, and Jetson Nano™ devices including Jetson Nano 2GB in the NVIDIA JetPack™ software development kit SDK. The update addresses security issues that...

OPENSUSE-SU-2022:0075-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 99.0.4844.51 boo1196641 CVE-2022-0789: Heap buffer overflow in ANGLE CVE-2022-0790: Use after free in Cast UI CVE-2022-0791: Use after free in Omnibox CVE-2022-0792: Out of bounds read in ANGLE CVE-2022-0793: Use after free in Views...

i-FILTER vulnerable to improper check for certificate revocation

Overview i-FILTER provided by Digital Arts Inc. is vulnerable to improper check for certificate revocation CWE-299 . Digital Arts Inc. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and Digital Arts Inc. coordinated under the Information Security Early...

Hackers Who Broke Into NVIDIA's Network Leak DLSS Source Code Online

American chipmaking company NVIDIA on Tuesday confirmed that its network was breached as a result of a cyber attack, enabling the perpetrators to gain access to sensitive data, including source code purportedly associated with its Deep Learning Super Sampling DLSS technology. "We have no evidence...

PT-2022-4682 · Intel · Intel Sps

Name of the Vulnerable Software and Affected Versions: IntelR SPS versions prior to SPS E3 04.08.04.330.0 IntelR SPS versions prior to SPS E3 04.01.04.530.0 Description: The issue is related to incomplete cleanup in a firmware subsystem, which may allow a privileged user to potentially enable...

PT-2022-3356

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.53 and prior versions Description The issue is related to the inconsistent interpretation of HTTP requests, also known as 'HTTP Request Smuggling', in the mod proxy ajp module of the Apache HTTP Server. This...

The Bug Report - February 2022 Edition

The Bug Report - February 2022 By Jesse Chick · March 2, 2022 Your Cybersecurity Comic Relief Image courtesy of https://toggl.com/ Why am I here? Welcome back to the Bug Report, stubby-month edition! For those in the audience unfamiliar with our shtick, every month we compile a shortlist of the t...

PT-2022-6777 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 99.0.4844.51 Description: The issue is related to an inappropriate implementation in the Omnibox feature of Google Chrome, which could allow an attacker in a privileged network position to perform a...

PT-2022-13861 · Delta Electronics · Cncsoft

Name of the Vulnerable Software and Affected Versions: Delta Electronics CNCSoft versions prior to 1.01.32 Description: The issue arises from improper input sanitization when processing a specific project file, leading to a possible out-of-bounds read condition. This can potentially result in...

WordPress Easy Post Views Count plugin <= 1.0.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Easy Post Views Count plugin versions = 1.0.2. Solution Update the WordPress Easy Post Views Count plugin to the latest available version at least 1.0.5...

WordPress Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar plugin <= 2.1.14 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar plugin versions = 2.1.14. Solution Update the WordPress Notification Bar, Announcement and Cookie Notice WordPress Plugin –...

WordPress Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC plugin <= 1.1.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC plugin versions = 1.1.9. Solution Update the WordPress Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC plugin to th...

WordPress Activity Log For MainWP plugin <= 1.7.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Activity Log For MainWP plugin versions = 1.7.0. Solution Update the WordPress Activity Log For MainWP plugin to the latest available version at least 1.7.1...

PT-2022-1877

Name of the Vulnerable Software and Affected Versions WatchGuard Firebox and XTM Appliances versions prior to 12.7.2 U2 WatchGuard Firebox and XTM Appliances versions prior to 12.1.3 U8 WatchGuard Firebox and XTM Appliances versions 12.2.x through 12.5.x prior to 12.5.9 U2 Description An...