26074 matches found
Stable Channel Update for Desktop
The Stable channel has been updated to 123.0.6312.122/.123 for Windows 123.0.6312.122/.123/.124 for Mac and 123.0.6312.122 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details a...
Adobe Animate 23.x < 23.0.5 / 24.x < 24.0.2 Multiple Vulnerabilities (APSB24-26)
The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 23.0.5 or 24.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-26 advisory. - Animate versions 23.0.4, 24.0.1 and earlier are affected by an out-of-bounds read vulnerabili...
ROS-20240409-06
A vulnerability in SaltStack Salt's configuration management and remote operations execution system is related to receiving multiple bad packets to the server equal to the number of worker threads, Salt will stop responding back requests before restarting. Exploitation of the vulnerability could...
The vulnerability of the WebKit component in iOS operating systems, macOS Sonoma, iPadOS, tvOS, visionOS, and watchOS allows attackers to execute arbitrary code.
The vulnerability of the WebKit component in iOS operating systems, macOS Sonoma, iPadOS, tvOS, visionOS, and watchOS relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
ssh: Prefix truncation attack on Binary Packet Protocol (BPP)
A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...
Node.js Multiple Vulnerabilities (Apr 2024) - Mac OS X
Node.js is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nodejs:node.js"; ifdescription...
Tenda F1202 formWriteFacMac Method Command Injection Vulnerability
The Tenda F1202 is an enterprise-grade dual-band wireless router that supports dual bands of 2.4GHz and 5GHz with a maximum transfer rate of 1200Mbps. The Tenda F1202 suffers from a command injection vulnerability that stems from a command injection vulnerability in the mac parameter of the...
Google Chrome Security Update(stable-channel-update-for-desktop-2024-04) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
Trusted Advisor now available for Mac, iOS, and Android
First released for Windows last year, the Malwarebytes Trusted Advisor dashboard is also now available on Mac, iOS and Android. Our Trusted Advisor dashboard provides an easy-to-understand assessment of your device’s security, with a single comprehensive protection score, and clear, expert-driven...
UBUNTU-CVE-2024-26683
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: detect stuck ECSA element in probe resp We recently added some validation that we don't try to connect to an AP that is currently in a channel switch process, since that might want the channel to be quiet or we...
Google Chrome Security Update(stable-channel-update-for-desktop-2024-03) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
The vulnerability of the formWriteFacMac function (/goform/WriteFacMac) in the Tenda AC7 router software allows a attacker to execute arbitrary commands.
The vulnerability of the fromSetRouteStatic /goform/SetStaticRouteCfg function in the Tenda AC7 router software relates to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
VMware Fusion SEoL (8.0.x)
According to its version, VMware Fusion is 8.0.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...
Stable Channel Update for Desktop
The Stable channel has been updated to 123.0.6312.105/.106/.107 for Windows and Mac and 123.0.6312.105 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kep...
The vulnerability of the addWifiMacFilter function (/goform/addWifiMacFilter) in the Tenda FH1203 router software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the addWifiMacFilter function /goform/addWifiMacFilter of the Tenda FH1203 router’s microprogramming software lies in the reading of data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the GetParentControlInfo() function (/goform/GetParentControlInfo) in the Tenda FH1205 router software allows a attacker to compromise the integrity, accessibility, and confidentiality of the protected information.
The vulnerability of the GetParentControlInfo function /goform/GetParentControlInfo in the Tenda FH1205 router software lies in the issue of the operation going beyond the buffer in memory when processing the mac parameter. Exploiting this vulnerability can allow an attacker to compromise the...
The vulnerability of the addWifiMacFilter function (/goform/addWifiMacFilter) in the Tenda FH1202 router software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the addWifiMacFilter function /goform/addWifiMacFilter in the Tenda FH1202 router software lies in the reading of data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability of the formWriteFacMac() function (/goform/WriteFacMac) in the Tenda FH1205 router software allows a hacker to execute arbitrary commands.
The vulnerability of the formWriteFacMac function /goform/WriteFacMac of the Tenda FH1205 router’s software lies in the lack of measures taken to neutralize special elements used in the OS commands when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execut...
