About the security content of visionOS2.1.1

About the security content of visionOS2.1.1 This document describes the security content of visionOS 2.1.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

CVE-2024-53088: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: i40e: fix race condition by adding filter's intermediate sync state Fix a race condition in the i40e driver that leads to MAC/VLAN filters becoming corrupted and leaking. Address the issue that occurs under heavy load when multip...

CVE-2024-21697: Undefined Security Weakness

This High severity RCE Remote Code Execution vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and 3.4.19 for Sourcetree for Windows. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to execute arbitrary code which has...

Stable Channel Update for Desktop

The Stable channel has been updated to 131.0.6778.85/.86 for Windows, Mac and 131.0.6778.85 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept restrict...

Qualys Cloud Security Agent Installed (Mac OS X)

Binary data qualyscloudagentmacosinstalled.nbin...

D-Link DSL6740C Security Bypass Info Disclosure

The vulnerability of D-Link DSL6740C modem’s microprogramming software is related to the possibility of bypassing security measures. Exploiting this vulnerability allows a malicious actor to read arbitrary system files, obtain the device’s MAC address, and attempt to log into the system using...

PT-2025-13826

Name of the Vulnerable Software and Affected Versions Netgear WNR854T version 1.5.2 Description The issue allows an attacker to send a specially crafted request to the "post.cgi" endpoint, updating the pppoe peer mac parameter in nvram and forcing a reboot, resulting in command injection...

Mozilla Thunderbird ESR Security Update (MFSA2024-61) - Mac OS X

Mozilla Thunderbird ESR is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Thunderbird Security Update (MFSA2024-62) - Mac OS X

Mozilla Thunderbird is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Office Multiple Vulnerabilities (Nov 2024) - Mac OS X

This host is missing an important security update for Microsoft Office on Mac OSX according to Microsoft security update November 2024 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Google Chrome Security Update (stable-channel-update-for-desktop_12-2024-11) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

kernel: wifi: mac80211: fix NULL dereference at band check in starting tx ba session

linux wifi mac80211 connection linkdata allocations can result in null pointer dereferencing...

Microsoft Visual Studio and Microsoft .NET security vulnerabilities

Microsoft Visual Studio and Microsoft .NET are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...

Microsoft Graphics Component resource management error vulnerability

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Graphics Component. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications running on PowerPC CPU based platforms

OpenSSL contains an issue in the POLY1305 MAC message authentication code implementation that might result in a corrupted internal application state. This flaw is only exploitable on PowerPC CPU based platforms if the CPU provides vector instructions PowerISA 2.07. The impact of the corrupted...

PT-2024-8932 · Snap One · Snap One Ovrc Cloud

Name of the Vulnerable Software and Affected Versions: Snap One OVRC cloud affected versions not specified Description: The issue concerns the use of MAC addresses as identifiers in the Snap One OVRC cloud, allowing an attacker to impersonate other devices by supplying enumerated MAC addresses an...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 131 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 131.0.6778.69 Linux 131.0.6778.69/.70 Windows, Mac contains a number of fixes and improvements -- a list of changes is...

CVE-2024-51189

TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting XSS vulnerability via the macListName1.1.1.0.0 parameter on the /filters.htm page...

CVE-2024-11067

The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files. Additionally, since the device's default password is a combination of the MAC address, attackers can obtain the MAC address through...

CVE-2024-11067

The CVE-2024-11067 entry concerns the D-Link DSL6740C modem/router. Affected component: path traversal vulnerability in the device’s resource/file handling that allows unauthenticated remote attackers to read arbitrary system files. Underlying cause: improper filtering of path elements leading to...