8262 matches found
NVIDIA’s Stolen Code-Signing Certs Used to Sign Malware
Two of NVIDIA’s code-signing certificates were part of the Feb. 23 Lapsus$ Group ransomware attack the company suffered – certificates that are now being used to sign malware so malicious programs can slide past security safeguards on Windows machines. The Feb. 23 attack saw 1TB of data bleed fro...
CVE-2022-26490
st21nfcaconnectivityeventreceived in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVTTRANSACTION buffer overflows because of untrusted length parameters...
Nvidia, the ransomware breach with some plot twists
On February 25, news broke about a cyberattack on Nvidia, America’s biggest microchip company, which saw parts of its business taken offline for two days. Soon after, the ransomware group LAPSUS$ claimed responsibility and threatened to leak 1 TB in exfiltrated data. You would think that while th...
WordPress Delivery Drivers for Vendors plugin <= 1.0.8 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Delivery Drivers for Vendors plugin versions = 1.0.8. Solution Update the WordPress Delivery Drivers for Vendors plugin to the latest available version at least 1.0.9...
WordPress Local Delivery Drivers for WooCommerce plugin <= 1.8.4 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Local Delivery Drivers for WooCommerce plugin versions = 1.8.4. Solution Update the WordPress Local Delivery Drivers for WooCommerce plugin to the latest available version at least 1.8.5...
WordPress Delivery Drivers for Vendors plugin <= 1.0.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Delivery Drivers for Vendors plugin versions = 1.0.8. Solution Update the WordPress Delivery Drivers for Vendors plugin to the latest available version at least 1.0.9...
WordPress Delivery Drivers Manager plugin <= 1.1.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Delivery Drivers Manager plugin versions = 1.1.5. Solution Update the WordPress Delivery Drivers Manager plugin to the latest available version at least 1.1.6...
WordPress Delivery Drivers Manager plugin <= 1.1.5 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Delivery Drivers Manager plugin versions = 1.1.5. Solution Update the WordPress Delivery Drivers Manager plugin to the latest available version at least 1.1.6...
WordPress Local Delivery Drivers for WooCommerce plugin <= 1.8.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Local Delivery Drivers for WooCommerce plugin versions = 1.8.4. Solution Update the WordPress Local Delivery Drivers for WooCommerce plugin to the latest available version at least 1.8.5...
GSD-2022-1000562 Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
Drivers: hv: vmbus: Fix memory leak in vmbusaddchannelkobj This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.11 by commit...
GSD-2022-1000478 Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
Drivers: hv: vmbus: Fix memory leak in vmbusaddchannelkobj This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.25 by commit...
GSD-2022-1000406 Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
Drivers: hv: vmbus: Fix memory leak in vmbusaddchannelkobj This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.102 by commit...
GSD-2022-1000358 Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
Drivers: hv: vmbus: Fix memory leak in vmbusaddchannelkobj This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.181 by commit...
How to update your drivers and when you need to
Many software vendors have a driver updater in their arsenal. But is it really that important to have the latest computer drivers? Where do you get them? And how do you go about updating? Driver updates fix security and compatibility problems, errors, broken code, and sometimes even add features ...
Exploit for CVE-2021-1675
CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewa...
CVE-2022-25258
The CVE-2022-25258 issue affects the Linux kernel USB Gadget subsystem, specifically drivers/usb/gadget/composite.c, where interface OS descriptor requests with large indices or NULL function pointer handling were not properly validated, enabling memory corruption. It affects kernels before 5.16....
Mageia: Security Advisory (MGASA-2022-0062)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2022-0062 Updated kernel packages fix security vulnerabilities
This kernel update is based on upstream 5.15.23 and fixes at least the following security issues: A stack overflow flaw was found in the Linux kernel TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64...
MGASA-2022-0063 Updated kernel-linus packages fix security vulnerabilities
This kernel-linus update is based on upstream 5.15.23 and fixes at least the following security issues: A stack overflow flaw was found in the Linux kernel TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than th...