Unauthorized Access Vulnerability in Damon's Big Data Analytics Platform

Wuhan Damon Database Co., Ltd. is specialized in providing big data platform architecture consulting, data technology solution planning, product deployment and implementation in one big data platform company. Unauthorized access vulnerability exists in Damon Big Data Analytics Platform, which can...

Fedora 38 : java-1.8.0-openjdk (2023-cccfdd62d2)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-cccfdd62d2 advisory. feature complete repack of jdk8 portable Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Security Bulletin: IBM i is vulnerable to an attacker executing CL commands due to an exploitation of DDM architecture (CVE-2023-30990)

Summary IBM i is vulnerable to a remote attacker executing CL commands due to an exploitation of DDM architecture as described in the vulnerability details section. IBM i has addressed the vulnerability in the DDM architecture as described in the remediation/fixes section. Vulnerability Details...

GHSA-7WRV-6H42-W54F PocketMine-MP vulnerable to server crash using badly formatted sign NBT in BlockActorDataPacket

Summary A player sending a packet can cause the server to crash by providing incorrect sign data in NBT in BlockActorDataPacket. Details This vulnerability was discovered using the BlockActorDataPacket, but other packets may also be affected. The player would seem to just need to send an NBT with...

SUSE SLED12: install-initrd-SLES / tftpboot-installation-SLED-12-SP5-x86_64 / etc (SUSE-SU-2023:2819-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2819-1 advisory. - rebuild the package with the new secure boot key bsc1209188. Tenable has extracted the preceding description block...

Guide to Operationalizing Zero Trust

Zero Trust is no longer a buzzword but an essential element in enterprise security architecture. Operating on the 'never trust, always verify' principle, Zero Trust plays a vital role in protecting enterprise assets and data. However, operationalizing Zero Trust can be challenging for businesses...

ARM Mali GPU Kernel Driver < r32p0 / < r36p0 Improper Memory Access (CVE-2022-22706)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r32p0 running on Midgard architecture or prior to r36p0 running on Bifrost or Valhall architecture. It is, therefore affected by an improper memory access vulnerability. A non-privileged user can get a write acce...

ARM Mali GPU Kernel Driver < r38p1 / r40p0 Improper Memory Access (CVE-2022-36449)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r38p1 or r40p0 running on Midgard, Bifrost or Valhall architecture. It is, therefore affected by an improper memory access vulnerability. A non-privileged user can make improper GPU processing operations to gain...

ARM Mali GPU Kernel Driver < r32p0 / < r37p0 Use After Free (CVE-2022-28348)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r32p0 running on Midgard architecture or prior to r37p0 running on Bifrost or Valhall architecture. It is, therefore affected by a use-after-free error. A non-privileged user can make improper operations on GPU...

ARM Mali GPU Kernel Driver < r29p0 / < r31p0 Use After Free (CVE-2021-28663)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r29p0 running on Bifrost or Valhall architecture or prior to r31p0 running on Midgard architecture. It is, therefore affected by a use-after-free error. vulnerability. A non-privileged user can make improper...

ARM Mali GPU Kernel Driver < r41p0 Use After Free (CVE-2022-42716)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r41p0 running on Valhall architecture. It is, therefore affected by a use-after-free error. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. Note that Ness...

ARM Mali GPU Kernel Driver < r39p0 Use After Free (CVE-2022-33917)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r39p0 running on Valhall architecture. It is, therefore affected by a use-after-free error. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. Note that Ness...

ARM Mali GPU Kernel Driver < r37p0 Use After Free (CVE-2022-28350)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r37p0 running on Valhall architecture. It is, therefore affected by a use-after-free error. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. Note that Ness...

ARM Mali GPU Kernel Driver < r38p2 / < r40p0 Improper Memory Access (CVE-2022-41757)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r38p2 or r40p0 running on Valhall architecture. It is, therefore affected by an improper memory access vulnerability. A non-privileged user can make improper GPU memory processing operations to gain write access ...

Multicloud Strategies Must Evolve to Meet the Needs of Global IT Leaders

In a Forrester study commissioned by Akamai, global IT leaders explain why they are adopting cloud-native architecture and distributing apps and workloads...

CVE-2023-30990

IBM i 7.2, 7.3, 7.4, and 7.5 could allow a remote attacker to execute CL commands as QUSER, caused by an exploitation of DDM architecture. IBM X-Force ID: 254036...

Code injection

IBM i 7.2, 7.3, 7.4, and 7.5 could allow a remote attacker to execute CL commands as QUSER, caused by an exploitation of DDM architecture. IBM X-Force ID: 254036...

CVE-2023-30990

CVE-2023-30990 affects IBM i 7.2–7.5. The flaw allows a remote attacker to execute CL commands as QUSER due to exploitation of the DDM architecture, with impact on confidentiality, integrity, and availability noted in the CVSS metrics. IBM documents that the vulnerability is fixed by applying PTF...

CVE-2023-30990 IBM i command execution

IBM i 7.2, 7.3, 7.4, and 7.5 could allow a remote attacker to execute CL commands as QUSER, caused by an exploitation of DDM architecture. IBM X-Force ID: 254036...

CVE-2023-30990 IBM i command execution

IBM i 7.2, 7.3, 7.4, and 7.5 could allow a remote attacker to execute CL commands as QUSER, caused by an exploitation of DDM architecture. IBM X-Force ID: 254036...