32677 matches found
DEBIAN-CVE-2024-38547
In the Linux kernel, the following vulnerability has been resolved: media: atomisp: sshcss: Fix a null-pointer dereference in loadvideobinaries The allocation failure of mycs-yuvscalerbinary in loadvideobinaries is followed with a dereference of mycs-yuvscalerbinary after the following call chain...
UBUNTU-CVE-2024-38547
In the Linux kernel, the following vulnerability has been resolved: media: atomisp: sshcss: Fix a null-pointer dereference in loadvideobinaries The allocation failure of mycs-yuvscalerbinary in loadvideobinaries is followed with a dereference of mycs-yuvscalerbinary after the following call chain...
New Malware Targets Exposed Docker APIs for Cryptocurrency Mining
Cybersecurity researchers have uncovered a new malware campaign that targets publicly exposed Docket API endpoints with the aim of delivering cryptocurrency miners and other payloads. Included among the tools deployed is a remote access tool that's capable of downloading and executing more...
SUSE CVE-2024-36587
Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy...
CVE-2024-38462
iRODS before 4.3.2 provides an msiSendMail function with a problematic dependency on the mail binary, such as in the mailMS.cppL94-L106 reference...
PT-2024-28018 · Irods · Irods
Name of the Vulnerable Software and Affected Versions: iRODS versions prior to 4.3.2 Description: The issue concerns a problematic dependency on the mail binary in the msiSendMail function. This function is referenced in mailMS.cppL94-L106. Recommendations: For versions prior to 4.3.2, update to...
PT-2024-28005 · Unknown · The Algorithms
Name of the Vulnerable Software and Affected Versions: The Algorithms - C versions through e5dad3f Description: The issue is related to a segmentation fault caused by deep recursion in the binary insertion sort.c file. This may impact common use cases, such as sorting an array of 50 elements...
CVE-2024-38462
iRODS before 4.3.2 provides an msiSendMail function with a problematic dependency on the mail binary, such as in the mailMS.cppL94-L106 reference...
OPENSUSE-SU-2024:12757-1 aws-nitro-enclaves-binaryblobs-upstream-1.2.2~git0.4ccc639-1.1 on GA media
These are all security issues fixed in the aws-nitro-enclaves-binaryblobs-upstream-1.2.2git0.4ccc639-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11931-1 aws-nitro-enclaves-binaryblobs-upstream-1.2.0~git2.841ef94-1.1 on GA media
These are all security issues fixed in the aws-nitro-enclaves-binaryblobs-upstream-1.2.0git2.841ef94-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2024-27165
Toshiba printers contain a suidperl binary and it has a Local Privilege Escalation vulnerability. A local attacker can get root privileges. As for the affected products/models/versions, see the reference URL...
CVE-2024-27165
CVE-2024-27165 affects Toshiba printers, with a Local Privilege Escalation via a suidperl binary that can grant root access to a local attacker. The CVE is documented with CVSS v3.1 base score 7.8 (Local, Low complexity, Privileges Required: Low, User Interaction: None; Confidentiality/Integrity/...
Mongo-Express Detection
Binary data mongoexpressdetect.nbin...
OpenTelemetry Collector Installed (Linux / Unix)
Binary data opentelemetrynixinstalled.nbin...
PT-2024-21698 · Toshiba · Toshiba Printers
Name of the Vulnerable Software and Affected Versions: Toshiba printers affected versions not specified Description: The issue concerns a Local Privilege Escalation vulnerability in Toshiba printers, specifically related to a suidperl binary. This vulnerability allows a local attacker to gain roo...
Keycloak Installed (Linux)
Binary data keycloaknixinstalled.nbin...
The vulnerability of the binary file control system of the software-hardware protection complex ViPNet Client allows a perpetrator to execute arbitrary code with administrator privileges.
The vulnerability of the binary file control system of the ViPNet Client software lies in the lack of access control mechanisms. Exploiting this vulnerability allows an attacker to execute arbitrary code with administrator privileges using a specially crafted DLL file placed in the ViPNet Client...
Zyxel NAS Multiple Vulnerabilities
The Zyxel NAS is potentially affected by multiple vulnerabilities. - This command injection vulnerability in the 'setCookie' parameter in Zyxel NAS326 and NAS542 devices could allow an unauthenticated attacker to execute some OS commands by sending a crafted HTTP POST request. CVE-2024-29973 - Th...
CVE-2024-0093
NVIDIA GPU software for Linux contains a vulnerability where it can expose sensitive information to an actor that is not explicitly authorized to have access to that information. A successful exploit of this vulnerability might lead to information disclosure...