PT-2025-49174

Name of the Vulnerable Software and Affected Versions Sigstore Timestamp Authority versions prior to 2.0.3 Description Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. The api.ParseJSONRequest and api.getContentType functions are susceptible to a denial-of-service issue...

PT-2025-2344 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...

PT-2025-2338 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...

Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20241218T202206 2024-12-18T20:22:06Z. jscPED-11136 Go CVE Numbering Authority IDs added or updated with aliases: GO-2024-3333 Update to version 0.0.20241218T163557 2024-12-18T16:35:57Z. jscPED-11136 Go CVE...

SUSE-SU-2024:4433-1 Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20241218T202206 2024-12-18T20:22:06Z. jscPED-11136 Go CVE Numbering Authority IDs added or updated with aliases: GO-2024-3333 - Update to version 0.0.20241218T163557 2024-12-18T16:35:57Z. jscPED-11136 Go CVE...

UBUNTU-CVE-2024-56741

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SUSE CVE-2024-53159

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SUSE CVE-2024-56571

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

UBUNTU-CVE-2024-53159

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

Malicious code in ecpfs-authority (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5333a0ce742bf60d678021234a8e4eef2260966cf5fc8f50bd63a6bce7669e07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11972 Malicious code in ecpfs-authority (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5333a0ce742bf60d678021234a8e4eef2260966cf5fc8f50bd63a6bce7669e07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Dutch DPA Fines Netflix €4.75 Million for GDPR Violations Over Data Transparency

The Dutch Data Protection Authority DPA on Wednesday fined video on-demand streaming service Netflix €4.75 million $4.93 million for not giving consumers enough information about how it used their data between 2018 and 2020. An investigation launched by the DPA in 2019 found that the tech giant d...

BIT-NODE-MIN-2023-30585

A vulnerability has been identified in the Node.js .msi version installation process, specifically affecting Windows users who install Node.js using the .msi installer. This vulnerability emerges during the repair operation, where the "msiexec.exe" process, running under the NT AUTHORITY\SYSTEM...

CVE-2024-56123

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-56122

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-56121

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-56120

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

The vulnerability of the MmMapIoSpace function in Ballistix MOD Utility software allows a hacker to increase their privileges.

The vulnerability of the MmMapIoSpace function in Ballistix MOD Utility software is related to access control deficiencies. Exploiting this vulnerability can allow attackers to elevate their privileges to “NT AUTHORITY\SYSTEM” by interacting with physical memory...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Local Security Authority Subsystem Service LSASS in Windows operating systems is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SUSE SLES15 / openSUSE 15 Security Update : govulncheck-vulndb (SUSE-SU-2024:4299-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:4299-1 advisory. - Update to version 0.0.20241209T183251 2024-12-09T18:32:51Z jscPED-11136 Go CVE Numbering Authority IDs added or updated with aliases:...