PT-2022-29536

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.17.1 Description The issue is related to accessing an array out of bounds for an enum type in the ASoC: codecs: va-macro component. The actual impact and attack plausibility have not yet been proven...

Cisco Releases Security Patches for TelePresence, RoomOS and Umbrella VA

Networking equipment maker Cisco has released security updates to address three high-severity vulnerabilities in its products that could be exploited to cause a denial-of-service DoS condition and take control of affected systems. The first of the three flaws, CVE-2022-20783 CVSS score: 7.5,...

va-kepzes.hu Cross Site Scripting vulnerability OBB-2531930

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-12150

Name of the Vulnerable Software and Affected Versions FIS GT.M versions through V7.0-000 Description An issue was discovered related to the YottaDB code base. Using crafted input, an attacker can cause a call to va arg on an empty variadic parameter list, most likely causing a memory segmentation...

CVE-2021-4198 messaging_ipc.dll NULL Pointer Dereference in multiple Bitdefender products (VA-10016)

A NULL Pointer Dereference vulnerability in the messagingipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools, VPN Standalone allows an attacker to arbitrarily crash product processes and generate crashdump files. This issue affects:...

PT-2025-8179

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, related to the ASoC: codecs: va-macro component. The issue arises when accessing enums using integers, which can lead to array ou...

PT-2022-38080

Уязвимость функций va macro dec mode get, va macro dec mode put модуля sound/soc/codecs/lpass-va-macro.c поддержки звука SoC ядра операционной системы Linux связана с чтением за границами буфера. Эксплуатация уязвимости может позволить нарушителю получить доступ к защищаемой информации или вызват...

dentistinspringfieldva.com Cross Site Scripting vulnerability OBB-2374207

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Virtuozzo PowerPanel Update 2 (7.0.4-75)

The update for Virtuozzo PowerPanel introduces new features as well as a stability and usability fix. Vulnerability id: PP-664 Wrong VA agent version could be displayed after an update...

mobile.va.gov Cross Site Scripting vulnerability OBB-2280170

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| mobile.va.gov ---|--- Open Bug Bounty...

Security Bulletin: Security vulnerabilities have been fixed in IBM Security Identity Manager Virtual Appliance

Summary IBM Security Identity Manager Virtual Appliance ISIM VA has addressed the following vulnerabilities Vulnerability Details CVEID: CVE-2021-29682 DESCRIPTION: IBM Security Identity Manager could allow a remote attacker to obtain sensitive information when a detailed technical error message ...

OESA-2021-1314 fetchmail security update

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...

Virtuozzo Automator 7.0 Update 2 Hotfix 13 (VA MN: 7.0.2-674)

Hotfix 13 for Virtuozzo Automator 7.0.2 provides a stability and usability fix. Vulnerability id: PVA-37631 Virtuozzo 6 nodes could appear as offline in Virtuozzo Automator 7 due to disabled support for TLS 1.0 required by VA 6 agents. As a part of the fix, the 'sslhighsecurity' parameter was add...

Security Bulletin: A security vulnerability has been fixed in IBM Security Identity Manager Virtual Appliance (CVE-2020-4576)

Summary IBM Security Identity Manager Virtual Appliance ISIM VA has addressed the following vulnerability due to a remote attacker's ability to obtain sensitive information with a specially-crafted sequence of serialized objects. This vulnerability is in IBM WebSphere Application Server, which is...

CVE-2020-36220

An issue was discovered in the va-ts crate before 0.0.4 for Rust. Because Demuxer omits a required T: Send bound, a data race and memory corruption can occur...

CVE-2020-36220

An issue was discovered in the va-ts crate before 0.0.4 for Rust. Because Demuxer omits a required T: Send bound, a data race and memory corruption can occur...

Memory corruption

An issue was discovered in the va-ts crate before 0.0.4 for Rust. Because Demuxer omits a required T: Send bound, a data race and memory corruption can occur...

Video Audio Va-ts Code Issue Vulnerability

Video-audio Va-ts is a Rust-based mpeg-ts implementation from the Video-audio team. A security vulnerability exists in Video Audio va-ts crate before 0.0.4 for Rust, which stems from Demuxer omitting a required T: Send binding, leading to data contention and memory corruption...

CVE-2020-36220

An issue was discovered in the va-ts crate before 0.0.4 for Rust. Because Demuxer omits a required T: Send bound, a data race and memory corruption can occur...

CVE-2020-36220

An issue was discovered in the va-ts crate before 0.0.4 for Rust. Because Demuxer omits a required T: Send bound, a data race and memory corruption can occur...