SUSE-SU-2023:4371-1 Security update for tiff

This update for tiff fixes the following issues: - CVE-2023-38289: Fixed a NULL pointer dereference in raw2tiff bsc1213589. - CVE-2023-38288: Fixed an integer overflow in raw2tiff bsc1213590. - CVE-2023-3576: Fixed a memory leak in tiffcrop bsc1213273. - CVE-2020-18768: Fixed an out of bounds rea...

Rocky Linux 8 : httpd:2.4 (RLSA-2021:4257)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4257 advisory. - Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by modsession can cause a NULL pointer dereference and crash,...

Malicious code in xterm-addon-clipboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5cf6d3796e2698ca788f0833376dcbd11460b764506f5ffb63bdd8e71262113e The OpenSSF Package Analysis project identified 'xterm-addon-clipboard' @ 6.0.7 npm as malicious. It is considered malicious because: - The...

MAL-2023-8444 Malicious code in xterm-addon-clipboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5cf6d3796e2698ca788f0833376dcbd11460b764506f5ffb63bdd8e71262113e The OpenSSF Package Analysis project identified 'xterm-addon-clipboard' @ 6.0.7 npm as malicious. It is considered malicious because: - The...

MAL-2023-8423 Malicious code in @olxui/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a653affd18c77f72727a33c59b7baebb39d3a38ecec4a894d1eff832cbc0501 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Out-of-bounds Write

exfatprogs is vulnerable to Out Of Bounds Write. The vulnerability is found in the readfiledentryset function within exfat2img.c. When the SecondaryCount exceeds a threshold of 2 plus the maximum number of File Name entries, it could potentially lead to writing data to memory locations beyond the...

Suspected Exploitation of Apache ActiveMQ CVE-2023-46604

Tom Elkins, John Fenninger, Evan McCann, Matthew Smith, and Micah Young contributed attacker behavior insights to this blog. Beginning Friday, October 27, Rapid7 Managed Detection and Response MDR identified suspected exploitation of Apache ActiveMQ CVE-2023-46604 in two different customer...

CVE-2022-48460

In setting service, there is a possible undefined behavior due to incorrect error handling. This could lead to local denial of service with no additional execution privileges needed...

CVE-2022-48460

In setting service, there is a possible undefined behavior due to incorrect error handling. This could lead to local denial of service with no additional execution privileges needed...

Code injection

In setting service, there is a possible undefined behavior due to incorrect error handling. This could lead to local denial of service with no additional execution privileges needed...

CVE-2022-48460

CVE-2022-48460 affects the UNISOC setting service. The root cause is undefined behavior from incorrect error handling, leading to local denial of service without additional privileges. Public details across connected documents confirm the issue’s nature but do not specify exact affected products/...

CVE-2022-48460

In setting service, there is a possible undefined behavior due to incorrect error handling. This could lead to local denial of service with no additional execution privileges needed...

CVE-2022-48460

In setting service, there is a possible undefined behavior due to incorrect error handling. This could lead to local denial of service with no additional execution privileges needed...

MAL-2023-8413 Malicious code in xterm-addon-unicode-graphemes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e517091262ed409fb53011792754e279673a300f5e9abf2377eec73ed814f9c The OpenSSF Package Analysis project identified 'xterm-addon-unicode-graphemes' @ 6.0.6 npm as malicious. It is considered malicious because: -...

CVE-2023-37243

The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots. Since the C:\Windows\Temp\Agent.Package.Availability folder inherits permissions from C:\Windows\Temp and Agent.Package.Availability.exe is susceptible t...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-3026)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Trellix 2024 Threat Predictions

Trellix 2024 Threat Predictions By Trellix · October 30, 2023 Introduction This last year we have seen upheaval across the cybersecurity landscape. The need for effective, worldwide threat intelligence continues to grow as geopolitical and economic developments create an increasingly complicated...

openSUSE 15 Security Update : libnbd (SUSE-SU-2023:4222-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:4222-1 advisory. - A flaw was found in libnbd. A server can reply with a block size larger than 2^63 the NBD spec states the size is a 64-bit unsigned value. This issue could...

MAL-2023-8406 Malicious code in fadam-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 02e81c60df4cba570ba561c45c4e1f48fe798f16078ef1a7c2c601cdb3edf1f7 The OpenSSF Package Analysis project identified 'fadam-frontend' @ 101.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2023-42406

SQL injection vulnerability in D-Link Online behavior audit gateway DAR-7000 V31R02B1413C allows a remote attacker to obtain sensitive information and execute arbitrary code via the editrole.php component...