SUSE: Security Advisory (SUSE-SU-2022:2055-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:2058-1 Security update for u-boot

This update for u-boot fixes the following issues: - A large buffer overflow could have lead to a denial of service in the IP Packet deframentation code. CVE-2022-30552, bsc1200363 - A Hole Descriptor Overwrite could have lead to an arbitrary out of bounds write primitive. CVE-2022-30790, bsc1200...

Das U-Boot 缓冲区错误漏洞

Das U-Boot is a boot loader program mainly for embedded systems. The program supports many different computer system architectures such as PPC, ARM, AVR32, MIPS, x86, 68k, Nios and MicroBlaze. A security vulnerability exists in Das U-Boot 2022.01 and earlier versions, which stems from the...

Chinese LuoYu Hackers Using Man-on-the-Side Attacks to Deploy WinDealer Backdoor

An "extremely sophisticated" Chinese-speaking advanced persistent threat APT actor dubbed LuoYu has been observed using a malicious Windows tool called WinDealer that's delivered by means of man-on-the-side attacks. "This groundbreaking development allows the actor to modify network traffic...

Grandstream Networks UCM6200 Series SQLi (Web UI)

A SQL injection vulnerability exists in Grandstream UCM6200 Series devices. An unauthenticated, remote attacker can exploit this to execute shell commands as root on versions before 1.0.19.20 or inject HTML in password recovery emails in versions before 1.0.20.17. Note that Nessus has not tested...

Apache APISIX Dashboard < 2.10.1 Authentication Bypass

The version of Apache APISIX Dashboard installed on the remote host is prior to 2.10.1. It is, therefore, affected by an authentication bypass vulnerability. An unauthenticated, remote attacker could exploit this to bypass authentication. Note that Nessus has not tested for these issues but has...

Mozilla: Incorrect AliasSet used in JIT Codegen

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability, this could have been used for an out-of-bounds memory read...

Mozilla: Incorrect AliasSet used in JIT Codegen

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability, this could have been used for an out-of-bounds memory read...

Mozilla: Incorrect AliasSet used in JIT Codegen

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability, this could have been used for an out-of-bounds memory read...

UBUNTU-CVE-2022-28285

When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability this could have been used for an out of bounds memory read. This vulnerability affects Thunderbird 91.8, Firefox 99, and Firefox ESR 91.8...

Amazon Corretto Java 8.x < 8.202.08.1 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 8 8.202.08.1. It is, therefore, affected by a vulnerability as referenced in the corretto-8-2019-Jan-23 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Amazon Corretto Java 11.x < 11.0.2.9.3 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 11 11.0.2.9.3. It is, therefore, affected by a vulnerability as referenced in the corretto-11-2019-Mar-19 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Amazon Corretto Java 11.x < 11.0.6.10.1-1 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 11 11.0.6.10.1-1. It is, therefore, affected by a vulnerability as referenced in the corretto-11-2020-Jan-16 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

Amazon Corretto Java 8.x < 8.212.04.2 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 8 8.212.04.2. It is, therefore, affected by a vulnerability as referenced in the corretto-8-2019-Apr-21 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Amazon Corretto Java 8.x < 8.252.09.2 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 8 8.252.09.2. It is, therefore, affected by a vulnerability as referenced in the corretto-8-2020-Apr-17 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Amazon Corretto Java 11.x < 11.0.9.12.1 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 11 11.0.9.12.1. It is, therefore, affected by a vulnerability as referenced in the corretto-11-2020-Nov-04 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reporte...

Amazon Corretto Java 8.x < 8.212.04.1 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 8 8.212.04.1. It is, therefore, affected by a vulnerability as referenced in the corretto-8-2019-Apr-16 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Amazon Corretto Java 11.x < 11.0.7.10.1-1 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 11 11.0.7.10.1-1. It is, therefore, affected by a vulnerability as referenced in the corretto-11-2020-Apr-22 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

Amazon Corretto Java 8.x < 8.232.09.2 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 8 8.232.09.2. It is, therefore, affected by a vulnerability as referenced in the corretto-8-2019-Nov-20 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Conti Leaks: Examining the Panama Papers of Ransomware | Trellix

Conti Leaks: Examining the Panama Papers of Ransomware By John Fokker, Jambul Tologonov · March 31, 2022 Introduction It isn’t often the whole world gets an inside look of the business operations of a top tier cybercriminal group. Very early on in the Russian-Ukrainian Crisis the predominantly...