PT-2022-5640 · Microsoft · Azure Rtos Guix Studio

Name of the Vulnerable Software and Affected Versions: Azure RTOS GUIX Studio affected versions not specified Description: The issue exists due to insufficient input validation in the Azure RTOS GUIX Studio development environment. Exploitation of this issue may allow an attacker to execute...

CVE-2020-35473

CVE-2020-35473 describes an information‑leakage vulnerability in Bluetooth Low Energy advertising scan responses (including extended scan responses) that can identify devices using Resolvable Private Addressing (RPA). Affected are Bluetooth Core Specifications 4.0–5.2 and extended scan responses ...

PT-2025-18548

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved. The problem occurs when performing seeding on a zoned filesystem, where it is necessary to initialize each zoned device's btrfs zoned devic...

PT-2022-36748 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-underflow read error. Technical details include the crash type and state, which involve functions such as gs type2...

gigamash.info Cross Site Scripting vulnerability OBB-3037097

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Debian: Security Advisory (DLA-3171)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PYSEC-2022-42969

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled...

[SECURITY] [DLA 3171-1] distro-info-data database update

Debian LTS Advisory DLA-3171-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera October 30, 2022 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.41+deb10u6 This is a routine update of the distro-info-data database for Debian LTS users. It includes...

PT-2022-24511 · Hcl · Hcl Workload Automation

Name of the Vulnerable Software and Affected Versions: HCL Workload Automation affected versions not specified Description: The issue allows a local user to overwrite key system files, which could cause the system to crash. Recommendations: At the moment, there is no information about a newer...

PT-2022-37394 · Diplib · Diplib

Name of the Vulnerable Software and Affected Versions: diplib version 3.0.0 Description: The issue is related to a Double Free error. Recommendations: For diplib version 3.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2022-20202 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue allows an attacker to execute malicious and unauthorized actions by exploiting cross-site request forgery. This could be done by transmitting actions from a user that the...

PT-2022-24138 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS versions on 7xxx series controllers affected versions not specified Description: The issue allows an attacker to execute arbitrary code during the boot sequence, potentially leading to permanent modification of the underlying operatin...

Inside Raccoon Stealer V2

Raccoon Stealer is back on the news again. US officials arrested Mark Sokolovsky, one of the malware actors behind this program. In July 2022, after several months of the shutdown, a Raccoon Stealer V2 went viral. Last week, the Department of Justice's press release stated that the malware...

IBAX go-ibax SQL injection vulnerability

IBAX go-ibax is a blockchain system platform from IBAX Corporation. IBAX go-ibax suffers from an SQL injection vulnerability that originates in an unknown function in file /api/v2/open/tablesInfo, where manipulation of parameter callbacks results in SQL injection...

IBAX go-ibax SQL injection vulnerability

IBAX go-ibax is a blockchain system platform from IBAX Corporation. IBAX go-ibax suffers from a SQL injection vulnerability that stems from unknown functionality in file/api/v2/open/tablesInfo, where manipulation of parameter callbacks leads to SQL injection...

UBUNTU-CVE-2022-3784

A vulnerability classified as critical was found in Axiomatic Bento4 5e7bb34. Affected by this vulnerability is the function AP4Mp4AudioDsiParser::ReadBits of the file Ap4Mp4AudioInfo.cpp of the component mp4hls. The manipulation leads to heap-based buffer overflow. The attack can be launched...

Bento4 buffer error vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version 5e7bb34, which stems from an affected AP4Mp4AudioDsiParser::ReadBits function in the Ap4Mp4AudioInfo.cpp file in the component mp4hls, which may result in a heap-based buffer...

PT-2022-25501 · Ragic · Ragic

Name of the Vulnerable Software and Affected Versions: Ragic affected versions not specified Description: The issue concerns insufficient filtering for special characters on the report generation page, allowing a remote attacker with general user privileges to inject JavaScript and perform a...

Debian dla-3171 : distro-info-data - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3171 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3171-1 [email protected] https://www.debian.org/lts/security/...

PT-2022-36723 · Git +1 · Wireshark

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. The crash state involves several functions, including expert set info vformat, expert add info...