38655 matches found
CVE-2024-23729
The ColorOS Internet Browser com.heytap.browser application 45.10.3.4.1 for Android allows a remote attacker to execute arbitrary JavaScript code via the com.android.browser.RealBrowserActivity component...
OPPO ColorOS Internet Browser com.heytap.browser 安全漏洞
OPPO ColorOS Internet Browser com.heytap.browser is an Android platform browser component application from OPPO, China. A security vulnerability exists in OPPO ColorOS Internet Browser com.heytap.browser version 45.10.3.4.1, which originates from a vulnerability that allows remote attackers to...
UBUNTU-CVE-2024-42307
In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential null pointer use in destroyworkqueue in initcifs error path Dan Carpenter reported a Smack static checker warning: fs/smb/client/cifsfs.c:1981 initcifs error: we previously assumed 'serverclosewq' could be nul...
Fedora: Security Advisory (FEDORA-2024-3f9eb3c86c)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2024:2941-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2941-1 advisory. - Intel CPU Microcode was updated to the 20240813 release bsc1229129 - CVE-2024-24853: Security updates for INTEL- SA-01083 -...
[SECURITY] Fedora 40 Update: tor-0.4.8.12-2.fc40
The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than making a direct connection, thus allowing both organizations and...
ipv6: prevent NULL dereference in ip6_output()
...
[SECURITY] Fedora 39 Update: tor-0.4.8.12-2.fc39
The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than making a direct connection, thus allowing both organizations and...
Fedora: Security Advisory (FEDORA-2024-c2da7f4de7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
In the Linux kernel before 5.1.7 a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g. UDP and ICMP). When such traffic is sent to multiple destination IP addresses it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may be conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses.
...
kernel: ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
A flaw was discovered in the Linux kernel's IPv6 implementation, specifically within the inet6rtmgetaddr function. The issue arises when user space provides a valid IFATARGETNETNSID value but omits the IFAADDRESS and IFALOCAL attributes. In such cases, the function returns an -EINVAL error while...
Internet Bug Bounty: CVE-2024-7347: Buffer overread in the ngx_http_mp4_module
CVE-2024-7347 was a vulnerability in the ngxhttpmp4module of NGINX Open Source and NGINX Plus. The vulnerability could have allowed an attacker to over-read NGINX worker memory, resulting in its termination, using a specially crafted MP4 file. The issue only affected NGINX if it was built with th...
Microsoft Internet Explorer Memory Corruption Vulnerability (KB5041770)
This host is missing an important security update according to Microsoft KB5041770 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Six 0-Days Lead Microsoft’s August 2024 Patch Push
Microsoft today released updates to fix at least 90 security vulnerabilities in Windows and related software, including a whopping six zero-day flaws that are already being actively exploited by attackers. Image: Shutterstock. This months bundle of update joy from Redmond includes patches for...
CVE-2024-38157
Azure IoT SDK Remote Code Execution Vulnerability...
CVE-2024-38115
Windows IP Routing Management Snapin Remote Code Execution Vulnerability...
KB5041770: Cumulative security update for Internet Explorer: August 13, 2024
KB5041770: Cumulative security update for Internet Explorer: August 13, 2024 Important Certain versions of Microsoft Internet Explorer have reached the end of support. Note that some versions of Internet Explorer may be supported past the latest OS end date when Extended Security Updates ESUs are...
PT-2024-5642 · Microsoft · Windows Ip Routing Management Snapin +1
Name of the Vulnerable Software and Affected Versions: Windows IP Routing Management Snapin affected versions not specified Description: The issue is related to a buffer overflow in the "heap" of the Windows IP Routing Management Snapin, which can be exploited by a remote attacker to execute...
Microsoft Azure IoT 资源管理错误漏洞
Microsoft Azure IoT is a centralized managed service from Microsoft Corporation USA. for bi-directional communication between IoT applications and their managed devices. A resource management error vulnerability exists in Microsoft Azure IoT. An attacker exploiting this vulnerability could remote...
PT-2024-5547
Name of the Vulnerable Software and Affected Versions Microsoft Edge versions prior to the fixed version Microsoft Windows 10 version 1507 prior to 10.0.10240.20751 Description The vulnerability is related to a memory corruption issue in the Windows Scripting Engine, which can be exploited by...