2019 matches found
nss and nspr bug fix and enhancement update
An update is available for nspr, nss. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Network Security Services NSS is a set of libraries designed to support the...
LIEF 代码问题漏洞
LIEF is a cross-platform library from the individual developer Romain Thomas. It is used to parse, modify and abstract Elf, Pe and MachO formats. A code issue vulnerability exists in LIEF that stems from the inclusion of a segmentation conflict in the component CoreFile.tcc:69...
LIEF 缓冲区错误漏洞
LIEF is a cross-platform library from the individual developer Romain Thomas. It is used to parse, modify and abstract Elf, Pe and MachO formats. LIEF has a security vulnerability that stems from a heap buffer overflow in the printbinary function in /c/machoreader.c. The vulnerability is caused b...
Vim Resource Management Error Vulnerability (CNVD-2022-68084)
Vim is a cross-platform text editor. versions prior to Vim 9.0.0388 are vulnerable to a resource management error, which stems from post-release reuse. No detailed vulnerability details are currently available...
Vim Resource Management Error Vulnerability (CNVD-2022-68085)
Vim is a cross-platform text editor, and a security vulnerability exists in versions prior to Vim 9.0.0321, which stems from a confusion in the instruction responsible for freeing memory in the qfbufaddline function. An attacker could use this vulnerability to cause a crash, arbitrary code...
Vim Resource Management Error Vulnerability (CNVD-2022-68088)
Vim is a cross-platform text editor. versions prior to Vim 9.0.0258 are vulnerable to a resource management error, which stems from the reuse of the function qffillbuffe after release. No detailed vulnerability details are currently available...
vim code issue vulnerability (CNVD-2022-68089)
Vim is a cross-platform text editor. vim 9.0.0259 previous versions have a code issue vulnerability that stems from NULL pointer dereferencing. No detailed vulnerability details are currently available...
AdvanceCOMP 安全漏洞
AdvanceCOMP is a cross-platform command line tool for data compression. The product is capable of optimizing compressed files and reducing their size. A security vulnerability exists in AdvanceCOMP v2.3 that stems from the inclusion of a segmentation error...
AdvanceCOMP 安全漏洞
AdvanceCOMP is a cross-platform command line tool for data compression. The product is capable of optimizing compressed files and reducing their size. A security vulnerability exists in AdvanceCOMP v2.3 that stems from a segmentation error...
[SECURITY] Fedora 35 Update: dotnet3.1-3.1.422-1.fc35
.NET Core is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET Core contains a runtime conforming to .NET Standards a set of...
[SECURITY] Fedora 36 Update: dotnet3.1-3.1.422-1.fc36
.NET Core is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET Core contains a runtime conforming to .NET Standards a set of...
[SECURITY] Fedora 35 Update: dotnet6.0-6.0.108-1.fc35
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...
[SECURITY] Fedora 36 Update: dotnet6.0-6.0.108-1.fc36
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...
Uncovering a ChromeOS remote memory corruption vulnerability
Microsoft discovered a memory corruption vulnerability in a ChromeOS component that can be triggered remotely, allowing attackers to perform either a denial-of-service DoS or, in extreme cases, remote code execution RCE. Following our D-Bus blog post that focused on Linux, we searched for similar...
Uncovering a ChromeOS remote memory corruption vulnerability
Microsoft discovered a memory corruption vulnerability in a ChromeOS component that can be triggered remotely, allowing attackers to perform either a denial-of-service DoS or, in extreme cases, remote code execution RCE. Following our D-Bus blog post that focused on Linux, we searched for similar...
Vim Resource Management Error Vulnerability (CNVD-2022-68104)
Vim is a cross-platform text editor, and a security vulnerability exists in versions prior to Vim 9.0.0221. The vulnerability stems from a mix-up in the instructions for the generatePCALL function responsible for freeing memory. An attacker could exploit this vulnerability to potentially cause a...
USB “Rubber Ducky” Attack Tool
The USB Rubber Ducky is getting better and better. Already, previous versions of the Rubber Ducky could carry out attacks like creating a fake Windows pop-up box to harvest a users login credentials or causing Chrome to send all saved passwords to an attackers webserver. But these attacks had to ...
North Korea Hackers Spotted Targeting Job Seekers with macOS Malware
The North Korea-backed Lazarus Group has been observed targeting job seekers with malware capable of executing on Apple Macs with Intel and M1 chipsets. Slovak cybersecurity firm ESET linked it to a campaign dubbed "Operation Interception" that was first disclosed in June 2020 and involved using...
Vim Buffer Overflow Vulnerability (CNVD-2022-68099)
Vim is a cross-platform text editor. versions of Vim prior to 9.0.0211 are vulnerable to a buffer overflow vulnerability that originates from out-of-bounds reads. No detailed vulnerability details are currently available...