Fedora: Security Advisory for bind-dyndb-ldap (FEDORA-2022-042d9c6146)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the installer component of the WPS Office office software package allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the installer component of the WPS Office office software package is related to the loading of a dynamic library that does not exist. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

The vulnerability in the WPS Presentation creation application of the WPS Office office software package arises from the loading of a non-existent dynamic library. This allows an attacker to escalate their privileges and execute arbitrary code.

The vulnerability of the WPS Presentation creation application within the WPS Office office software package is related to the loading of a non-existent dynamic library, d3dx941.dll. Exploiting this vulnerability can allow an attacker to elevate their privileges and execute arbitrary code...

The vulnerability of the DHCPv6 protocol implementation in the Trace TCP/IP stack allows a attacker to gain unauthorized access to protected information.

The vulnerability in the DHCPv6 protocol implementation of the Trace TCP/IP stack is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Ostorlab - A Security Scanning Platform That Enables Running Complex Security Scanning Tasks Involving Multiple Tools In An Easy, Scalable And Distributed Way

The Sales Pitch If this is the first time you are visiting the Ostorlab Github page, here is the sales pitch. Security testing requires often chaining tools together, taking the output from one, mangling it, filtering it and then pushing it to another tool. Several tools have tried to make the...

[SECURITY] Fedora 34 Update: bind-dyndb-ldap-11.9-9.fc34

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

[SECURITY] Fedora 36 Update: bind-dyndb-ldap-11.9-14.fc36

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

The vulnerability of the Vim text editor arises from buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of the Vim text editor arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

VulnCheck KEV: CVE-2014-3120

Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code...

Elasticsearch Remote Code Execution Vulnerability

Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code...

Juniper Junos OS Path Traversal Vulnerability

A path traversal vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN DVPN, Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning ZTP allows an unauthenticated attacker to perform remote code execution...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to induce a service failure.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Exploring a New Class of Kernel Exploit Primitive

The security landscape is dynamic, changing often and as a result, attack surfaces evolve. MSRC receives a wide variety of cases spanning different products, bug types and exploit primitives. One particularly interesting primitive we see is an arbitrary kernel pointer read. These often happen whe...

Exploring a New Class of Kernel Exploit Primitive

The security landscape is dynamic, changing often and as a result, attack surfaces evolve. MSRC receives a wide variety of cases spanning different products, bug types and exploit primitives. One particularly interesting primitive we see is an arbitrary kernel pointer read. These often happen whe...

[SECURITY] Fedora 35 Update: bind-dyndb-ldap-11.9-11.fc35

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

Vulnerability Profile Spring Cloud Gateway is a brand new pro...

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

Vulnerability Profile Spring Cloud Gateway is a brand new pro...

GHSA-8C26-WMH5-6G9V vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid-fips, kubeflow-fips, kubeflow, dynamic-localpv-provisioner, terraform-provider-sendgrid, dynamic-localpv-provisioner-fips, k3d...

GHSA-8C26-WMH5-6G9V vulnerabilities

Vulnerabilities for packages: k3d, terraform-provider-sendgrid, kubeflow, dynamic-localpv-provisioner...

[SECURITY] Fedora 35 Update: openexr-3.1.4-1.fc35

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR...