CVE-2024-33220

An issue in the component AslO364.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33221

An issue in the component AsusBSItf.sys of ASUSTeK Computer Inc ASUS BIOS Flash Driver v3.2.12.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33218

An issue in the component AsUpIO64.sys of ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver 5.30.20.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33223

CVE-2024-33223 affects ASUS GPU TweakII v1.4.5.2; the issue lies in the IOMap64.sys component, enabling attackers to escalate privileges and execute arbitrary code by sending crafted IOCTL requests. Mitigation from PT-Security recommends disabling IOMap64.sys until a patch is available. Documenta...

CVE-2024-33223

An issue in the component IOMap64.sys of ASUSTeK Computer Inc ASUS GPU TweakII v1.4.5.2 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33222

An issue in the component ATSZIO64.sys of ASUSTeK Computer Inc ASUS ATSZIO Driver v0.2.1.7 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33219

CVE-2024-33219 affects the AsIO64.sys component in ASUSTeK (ASUS) SABERTOOTH X99 Driver v1.0.1.0. The issue allows local privilege escalation and arbitrary code execution via specially crafted IOCTL requests, with a CVSS v3.1 base score of 7.8 (Impact: Confidentiality, Integrity, Availability Hig...

CVE-2024-33219

An issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33218

An issue in the component AsUpIO64.sys of ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver 5.30.20.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33218

The CVE-2024-33218 entry concerns ASUSTeK Computer Inc.’s ASUS USB 3.0 Boost Storage Driver (version 5.30.20.0) and its AsUpIO64.sys component. The vulnerability allows attackers to escalate privileges and execute arbitrary code by sending crafted IOCTL requests, with local attack potential and h...

The vulnerability of the Adobe Animate software for creating multimedia and computer animations, related to integer overflow, allows attackers to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code...

ALSA-2024:3184 Moderate: grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fixes: grub2:...

MAL-2024-1380 Malicious code in tcm-app-migration-miles-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9025c83532f86e4420c8cd88f4f408a7857044b1f990a20c9a64fa0cc2ea902f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1376 Malicious code in cors-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65973996ac5fe9e3643ff06df0969577e5479d4b06b1b867e8e8ce662f1f6aef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1375 Malicious code in @westpac-components-web/hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 935f3ecec4f48a905f04e98df7c4b7010c6fdc9900763c6aa3fe749e8ffd9237 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1378 Malicious code in test_dependency_confusion12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b278ddd9e6c5237e992377e7fcac512039bf85125c688c1ad0dfad61caef8df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1374 Malicious code in @ozon-ob-toolbox/format-date (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99cb774b8b6118ad1c97aca951b1ac6bfc5814a661b3fea62fecd862204f47ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1372 Malicious code in @ozon-ob-foundation/event-bus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5d1a30ed3380955e93d6ee25ac05fd6a61c06bc20d670f0fd01e6a4565c82e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1373 Malicious code in @ozon-ob-foundation/tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4870f4e08a8884dceac0f1a3032fde78810c30390ddff720817ebfad9108ec65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1371 Malicious code in @ozon-ob-foundation/communication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbd79919619acaea0f1d0de932d737a71b7ac5c27049e11483522540d39daed7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...