13045 matches found
ALSA-2023:6578 Moderate: libqb security update
The libqb packages provide a library with the primary purpose of providing high performance client/server reusable features, such as high performance logging, tracing, inter-process communication, and polling. Security Fixes: libqb: Buffer overflow in logblackbox.c CVE-2023-39976 For more details...
Moderate: libqb security update
The libqb packages provide a library with the primary purpose of providing high performance client/server reusable features, such as high performance logging, tracing, inter-process communication, and polling. Security Fixes: libqb: Buffer overflow in logblackbox.c CVE-2023-39976 For more details...
PT-2023-28414 · Samsung · Samsung Account
Name of the Vulnerable Software and Affected Versions: Samsung Account versions prior to 14.5.00.7 Description: The issue concerns the use of implicit intent for sensitive communication in the startEmailValidationActivity function within Samsung Account. This allows attackers to access arbitrary...
Mitsubishi Electric GOT and Tension Controller (CVE-2021-20589)
Buffer access with incorrect length value vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.38.000, GT25 model communication driver versions 01.19.000 through 01.38.000, GT23 model communication driver versions 01.19.000 through 01.38.000 and GT21 model...
Qualcomm Chipsets Security Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from information disclosure in the Qualcomm IPC when reading values from shared memory in a VM...
PT-2023-28413 · Samsung · Samsung Account
Name of the Vulnerable Software and Affected Versions: Samsung Account versions prior to 14.5.00.7 Description: The issue concerns the use of implicit intent for sensitive communication in the startAgreeToDisclaimerActivity function within Samsung Account. This allows attackers to access arbitrar...
ALSA-2023:6482 Moderate: librabbitmq security update
The librabbitmq packages provide an Advanced Message Queuing Protocol AMQP client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security Fixes: rabbitmq-c/librabbitmq: Insecure credentials submission CVE-2023-35789 For more details about the security issue...
CVE-2022-48193
Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...
CVE-2022-48193
Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...
CVE-2022-48193
Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...
Code injection
Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...
PT-2023-15612 · Softing · Smartlink Sw-Ht
Name of the Vulnerable Software and Affected Versions: Softing smartLink SW-HT versions prior to 1.30 Description: The issue concerns the use of weak ciphers during secure communication via SSL in the affected software. This could potentially compromise the security of the communication...
Macvim Security Vulnerabilities
Vim is a cross-platform text editor. A security vulnerability exists in previous versions of Macvim 178 that stems from the use of an insecure inter-process communication mechanism, which may lead to privilege escalation...
Malicious code in mux-spaces-broadcast-layouts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01c1c36f1f5a800c8875fff926e7201ac81769be7b9484aa1360c3cb2118ae00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8437 Malicious code in ch-frontend-assignment (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 92c955a3b8b209ddf9f49a5b749724ccfbb0bdd4c9941bb6f327c4b83e193d81 The OpenSSF Package Analysis project identified 'ch-frontend-assignment' @ 0.1.0 npm as malicious. It is considered malicious because: - The...
Malicious code in gatsby-starter-gitlab (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bc23995a775ff33fc2732574cfd95b0d8efee1cdcadd229b67acde3123fac5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8435 Malicious code in tvaultuiv2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ffe7dc0907e6c0a6e1fc443558d8a6117e991d3b392e45eded0a16a22388fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-44569
A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication...