997 matches found
CVE-2016-79267926
tcpdump on IBM AIX is affected by CVE-2016-7926 (Ethernet parser). The advisory states a buffer overflow due to improper bounds checking in Ethernet parser (print-ether.c:ethertype_print()) that could allow remote code execution or a crash. Affected AIX versions/filesets include bos.net.tcp.serve...
CVE-2021-1000007
The connected advisories describe a DoS: parsing duration strings with very large exponents in the Rust parse_duration crate (via parse_duration::parse) can exhaust CPU and memory, enabling an attacker to cause high resource usage. The issue is caused by using BigInt with exponentiation in the pa...
CVE-2010-1569
Technical details for CVE-2010-1569 are not publicly available in the provided documents; monitor for updates as information may be released in the future.
CVE-2020-24597
CVE-2020-24597: Joomla core contains a directory traversal in com_media that allows access to files outside the webroot. Public sources list affected versions as Joomla core up to 3.9.24 (Nessus plugin 112581) and up to 3.9.20 (OpenVAS entry). Root cause is lack of input validation for com_media ...
CVE-2020-6913
HP Sure Sense driver may have a vulnerability that could allow Unauthorized Code Execution, per HP PSRT bulletin HPSBHF03663 rev. 1. Details are limited; bulletin may be updated as new information or SoftPaqs become available. HP recommends keeping firmware/software up to date. The connected docu...
CVE-2014-4704
CVE-2014-4704 is associated with a DoS vulnerability in Huawei devices (Campus Switch, AR, SRG, WLAN). The flaw in the RADIUS component allows a remote, authenticated attacker to send malformed RADIUS packets to trigger device restarts. Affected products and exact firmware versions are described ...
CVE-2018-11817
CVE-2018-11817 is listed as a critical issue in Qualcomm DSP_Services within the Android 2019-03 bulletin context. The connected document confirms the CVE is associated with Qualcomm DSP_Services (as part of Qualcomm components) and is rated Critical, but does not provide further technical detail...
CVE-2018-36464
Technical details for CVE-2018-36464 are not provided in the available documents. The Connected Huawei advisory discusses L1TF-related CVEs (e.g., CVE-2018-3646) but does not reveal specifics for 2018-36464. Monitor for updates.
CVE-2021-43014
Adobe Connect is affected by CSRF leading to arbitrary file system write (CVE-2021-43014) as described in APSB21-112. The vulnerability is tied to Adobe Connect versions prior to the fixed release (vendor fix listed in APSB21-112). Exploitation context is a CSRF flaw without token authentication ...
CVE-2013-3364
CVE-2013-3364 aligns with a GitHub advisory and OSV entry describing unauthenticated remote command injection in the ep_imageconvert plugin for Etherpad Lite. The vulnerability affects ep_imageconvert
CVE-2021-11193
Technical details for CVE-2021-11193 are not publicly available in the provided documents. Monitor for updates.
Is Firefox OK?
Mozilla’s privacy-heavy browser is flatlining. What it does next is crucial for the future of the web...
CVE-2021-39676
In writeThrowable of AndroidFuture.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
3 cybersecurity trends & mitigation strategies for CISOs
Explore 3 cyber security trends and how to strategically mitigate future risks with Trend Micro’s Jon Clay, VP of threat intelligence and Ed Cabrera, chief cybersecurity officer...
Recorded Future: Dom Xss vulnerability
Summary: Dom Xss vulnerability Steps To Reproduce: add details for how we can reproduce the issue 1. Go to this link: https://api.recordedfuture.com/index.html 2. Open chrome devtool and go to console tab 3. Type: document.write'...alert1...'; 4. And boom! Alert 1! Impact XSS can have huge...
Abuse and Fraud Prevention's Co-Created Future — Predictions for 2022 and Beyond
Explore some of the Akamai Abuse and Fraud Prevention team’s predictions for the future of abuse and fraud protection in 2022 and beyond...
OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Keytool. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...
Prognosis On The Future Of 3D Typography
By Owais Sultan It isn't easy to figure out where 3d typography is heading, however, there are ways that explain the future of 3d typography. This is a post from HackRead.com Read the original post: Prognosis On The Future Of 3D Typography...
Early user can break addLiquidity
Handle WatchPug Vulnerability details uint256 totalLiquidityUnits = totalSupply; if totalLiquidityUnits == 0 liquidity = nativeDeposit; // TODO: Contact ThorChain on proper approach In the current implementation, the first liquidity takes the nativeDeposit amount and uses it directly. However,...