UBUNTU-CVE-2022-40775

An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4StszAtom::WriteFields...

Bento4 代码问题漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 1.6.0-639 and earlier versions that stems from a null pointer dereference in its AP4StszAtom::WriteFields component...

PT-2022-25533 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 versions 1.6.0-639 and earlier Description: An issue was discovered in Bento4, where there is a NULL pointer dereference in the AP4 StszAtom::GetSampleSize function. Recommendations: For Bento4 versions 1.6.0-639 and earlier, consider...

CVE-2022-40736

An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in AP4CttsAtom::Create in Core/Ap4CttsAtom.cpp...

Bento4 资源管理错误漏洞

Bento4 is an open source C library for reading and writing MP4 files. Bento4 version 1.6.0-639 suffers from a denial-of-service vulnerability that stems from AP4CttsAtom::Create in its Core/Ap4CttsAtom.cpp component, which may consume too much memory. An attacker could exploit the vulnerability t...

[SECURITY] Fedora 36 Update: kiln-0.3.1-4.fc36

A simple static site generator. Features - Simple - Extensible - Gemini support - Atom feeds - Go templates...

OESA-2022-1773 microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2020-24489 Domain-bypass transient execution vulnerability in so...

[SECURITY] Fedora 35 Update: kiln-0.3.1-3.fc35

A simple static site generator. Features - Simple - Extensible - Gemini support - Atom feeds - Go templates...

[SECURITY] Fedora 36 Update: kiln-0.2.0-4.fc36

A simple static site generator. Features - Simple - Extensible - Gemini support - Atom feeds - Go templates...

State-Backed Hackers Using Ransomware as a Decoy for Cyber Espionage Attacks

A China-based advanced persistent threat APT group is possibly deploying short-lived ransomware families as a decoy to cover up the true operational and tactical objectives behind its campaigns. The activity cluster, attributed to a hacking group dubbed Bronze Starlight by Secureworks, involves t...

CVE-2022-31287

An issue was discovered in Bento4 v1.2. There is an allocation size request error in /Ap4RtpAtom.cpp...

CVE-2022-31287

An issue was discovered in Bento4 v1.2. There is an allocation size request error in /Ap4RtpAtom.cpp...

Fedora: Security Advisory for php-openpsa-universalfeedcreator (FEDORA-2022-a66124e04f)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for php-openpsa-universalfeedcreator (FEDORA-2022-59f0ad964c)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: php-openpsa-universalfeedcreator-1.8.4.1-1.fc35

RSS and Atom feed generator. Supported formats: RSS0.91, RSS1.0, RSS2.0, PIE0.1 deprecated, MBOX, OPML, ATOM, ATOM0.3, HTML, JS, PHP. Autoloader: /usr/share/php/openpsa-universalfeedcreator/autoload.php...

[SECURITY] Fedora 36 Update: php-openpsa-universalfeedcreator-1.8.4.1-1.fc36

RSS and Atom feed generator. Supported formats: RSS0.91, RSS1.0, RSS2.0, PIE0.1 deprecated, MBOX, OPML, ATOM, ATOM0.3, HTML, JS, PHP. Autoloader: /usr/share/php/openpsa-universalfeedcreator/autoload.php...

[SECURITY] Fedora 34 Update: php-openpsa-universalfeedcreator-1.8.4.1-1.fc34

RSS and Atom feed generator. Supported formats: RSS0.91, RSS1.0, RSS2.0, PIE0.1 deprecated, MBOX, OPML, ATOM, ATOM0.3, HTML, JS, PHP. Autoloader: /usr/share/php/openpsa-universalfeedcreator/autoload.php...

co.paralleluniverse:galaxy (>=1.1 <=1.2), co.paralleluniverse:quasar-galaxy (=0.2.0) +386 more potentially affected by CVE-2013-4112 via org.jgroups:jgroups (>=3.0.0.CR1 <=3.2.8.Final)

org.jgroups:jgroups MAVEN version =3.0.0.CR1, =1.1, =1.0.0-1, =1.0.7364, =1.0d13, =1.0d18, =1.0d13, =1.0d13, =0.13.1, =0.7.3, =0.8.0, =0.9.0 and more Source cves: CVE-2013-4112 Source advisory: OSV:GHSA-CC62-496P-HRR7...

Improper Restriction of XML External Entity Reference in Apache CXF JAX-RS

The JAX-RS module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 provides a number of Atom JAX-RS MessageBodyReaders. These readers use Apache Abdera Parser which expands XML entities by default which represents a major XXE risk...

2022.1 IPU - Intel® Boot Guard and Intel® TXT Advisory

Summary: A potential security vulnerability in Intel® Boot Guard and Intel® Trusted Execution Technology TXT for some Intel® processors may allow escalation of privilege. Intel is releasing firmware updates and prescriptive guidance to mitigate this potential vulnerability. Vulnerability Details:...