Deserialization Of Untrusted Data

opensearch-ruby is vulnerable to deserialization of untrusted data. The vulnerability exists due to the unsafe deserialization of response.body data in YAML.load functionality in the verifyopensearch function of pensearch.rb...

ruby:2.6 security, bug fix, and enhancement update

ruby 2.6.10-109 - Upgrade to Ruby 2.6.10. Resolves: rhbz2088415 - Fix buffer overrun in String-to-Float conversion. Resolves: CVE-2022-28739 - Fix FTBFS due to an incompatible load directive. - Fix a fiddle import test on an optimized glibc on Power 9...

The vulnerability of the `load_elf_binary()` function in the Linux operating system’s kernel allows a hacker to bypass the ASLR protection and expose the protected information.

The vulnerability of the loadelfbinary function in the Linux operating system’s kernel arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to bypass the ASLR protection mechanism and disclose the protected information...

RSSHub 资源管理错误漏洞

RSSHub is an RSS feed generator written in Node.js, distributed under the MIT license and maintained by DIYgod and other GitHub users. A resource management error vulnerability exists in versions of RSSHub prior to 2020-02-09, which stems from the fact that parameters such as filter and filterout...

GSD-2022-1003375 drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo

drm/amdgpu/ucode: Remove firmware load type check in amdgpuucodefreebo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1002816 drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo

drm/amdgpu/ucode: Remove firmware load type check in amdgpuucodefreebo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

The vulnerability of the Yandex Browser, related to errors in processing symbolic links, allows attackers to escalate their privileges.

The vulnerability of the Yandex Browser is related to errors in processing symbolic links when loading the installation file. Exploiting this vulnerability can allow an attacker to increase their privileges...

Malicious code in load-date (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd5e61507806967bd7bdac762e3f0f48883157def37151eacca646713cd2fc16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in load-image-exif (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c314aa9b8893f20f40e6ab9b53ab508347aa09e376589762f1a429e1cdd33a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4338 Malicious code in load-image-exif (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c314aa9b8893f20f40e6ab9b53ab508347aa09e376589762f1a429e1cdd33a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4339 Malicious code in load-image-ios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4c70a04dee1e95def698964376115865ad76594c55a641097c8d07afaaa9b09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in load-image-ios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4c70a04dee1e95def698964376115865ad76594c55a641097c8d07afaaa9b09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in load-image-meta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 253cffc7e3e71e02985ac62369fff4ddf3ed3f5036a29626ce30a64bef3afcc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4340 Malicious code in load-image-meta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 253cffc7e3e71e02985ac62369fff4ddf3ed3f5036a29626ce30a64bef3afcc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ardoq-sheet-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95ffe4a6b987be146cd7315473d74b684d40acd0755edcb6f2f6f08398473ad2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1083 Malicious code in ardoq-sheet-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95ffe4a6b987be146cd7315473d74b684d40acd0755edcb6f2f6f08398473ad2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2636 Malicious code in dynamic-load-sticky-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cae02f392cd1bcfcc0c014ee7fed7a90f615a4fb38ab23b0e73d06f33c72d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dynamic-load-sticky-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cae02f392cd1bcfcc0c014ee7fed7a90f615a4fb38ab23b0e73d06f33c72d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.

...

Security update for caddy (moderate)

openSUSE Security Update: Security update for caddy Announcement ID: openSUSE-SU-2022:10007-1 Rating: moderate References: 1200279 Cross-References: CVE-2022-297182 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes one vulnerability is now available. Description: This update f...