ROS-20240805-05

Vulnerability in kube-apiserver component of virtual machine cluster management software tool Kubernetes is related to redirection to malicious resources during proxied update requests. Exploitation of the vulnerability could allow an attacker acting remotely to escalate their privileges...

PT-2024-25059 · Qualcomm · Snapdragon +159

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue occurs when a driver accesses the ML IE memory and the offset value is incremented beyond the ML IE length, resulting in a transient Denial of...

May 19, 2022—KB5015020 (OS Builds 19042.1708, 19043.1708, and 19044.1708) Out-of-band

May 19, 2022—KB5015020 OS Builds 19042.1708, 19043.1708, and 19044.1708 Out-of-band Applies To Windows Server, version 20H2, all editions Windows 10, version 21H1, all editions Windows 10, version 21H2, all editions Windows 10 Enterprise Multi-Session, version 20H2 Windows 10 Enterprise and...

December 20, 2022—KB5022554 (OS Build 17763.3772) Out-of-band

December 20, 2022—KB5022554 OS Build 17763.3772 Out-of-band Applies To Win 10 Ent LTSC 2019 Win 10 IoT Ent LTSC 2019 Windows 10 IoT Core LTSC Windows Server 2019 Note 10/11/22 REMINDER As of September 20, 2022, there are no more optional, non-security preview releases for the 2019 LTSC editions a...

December 20, 2022—KB5022553 (OS Build 20348.1368) Out-of-band

December 20, 2022—KB5022553 OS Build 20348.1368 Out-of-band Applies To Windows Server 2022 Note 12/22/22 IMPORTANT After November 22, 2022, there are no more optional, non-security preview releases for Windows Server 2022. Only cumulative monthly security updates known as the "B" or Update Tuesda...

January 17, 2019—KB4480955 (Preview of Monthly Rollup)

January 17, 2019—KB4480955 Preview of Monthly Rollup Applies To Windows 7 Service Pack 1 Windows Server 2008 R2 Service Pack 1 Improvements and fixes This non-security update includes improvements and fixes that were a part of KB4480970 released January 8, 2019 and also includes these new quality...

February 19, 2019—KB4487016 (Preview of Monthly Rollup)

February 19, 2019—KB4487016 Preview of Monthly Rollup Applies To Windows 8.1 Windows Server 2012 R2 Improvements and fixes This non-security update includes improvements and fixes that were a part of KB4487000 released February 12, 2019 and also includes these new quality improvements as a previe...

February 19, 2019—KB4487022 (Preview of Monthly Rollup)

February 19, 2019—KB4487022 Preview of Monthly Rollup Applies To Windows Server 2008 Service Pack 2 Improvements and fixes This non-security update includes improvements and fixes that were a part of KB4487023 released February 12, 2019 and also includes these new quality improvements as a previe...

February 19, 2019—KB4487024 (Preview of Monthly Rollup)

February 19, 2019—KB4487024 Preview of Monthly Rollup Applies To Windows Server 2012 Windows Embedded 8 Standard Improvements and fixes This non-security update includes improvements and fixes that were a part of KB4487025 released February 12, 2019 and also includes these new quality improvement...

May 25, 2017—KB4020102 (OS Build 15063.332)

May 25, 2017—KB4020102 OS Build 15063.332 Applies To Windows 10, version 1703, all editions Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issue where NTLM fails to generate a...

May 17, 2018—KB4103720 (OS Build 14393.2273)

May 17, 2018—KB4103720 OS Build 14393.2273 Applies To Windows 10, version 1607, all editions Windows Server 2016, all editions Note Windows 10, version 1607, reached end of service on April 10, 2018. Devices running Windows 10 Home or Pro editions will no longer receive monthly security and quali...

Obfuscation: There Are Two Sides To Everything

How to detect and prevent attackers from using these various techniques Obfuscation is an important technique for protecting software that also carries risks, especially when used by malware authors. In this article, we examine obfuscation, its effects, and responses to it. What Is Obfuscation?...

BIT-TENSORFLOW-2023-33976 TensorFlow segfault in array_ops.upper_bound

TensorFlow is an end-to-end open source platform for machine learning. arrayops.upperbound causes a segfault when not given a rank 2 tensor. The fix will be included in TensorFlow 2.13 and will also cherrypick this commit on TensorFlow 2.12...

CVE-2024-31201

A “CWE-428: Unquoted Search Path or Element” affects the ThermoscanIPScrutation service. Such misconfiguration could be abused in scenarios where incorrect permissions were assigned to the C:\ path to attempt a privilege escalation on the local machine...

CVE-2024-31201

A “CWE-428: Unquoted Search Path or Element” affects the ThermoscanIPScrutation service. Such misconfiguration could be abused in scenarios where incorrect permissions were assigned to the C:\ path to attempt a privilege escalation on the local machine...

Malicious code in @illimity/rtl-faqs-state (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b3cec0888ebd3cfb912bb1459486caca7109d7fdb2a980c28641e3eef38d451 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-33976

TensorFlow is an end-to-end open source platform for machine learning. arrayops.upperbound causes a segfault when not given a rank 2 tensor. The fix will be included in TensorFlow 2.13 and will also cherrypick this commit on TensorFlow 2.12...

CVE-2023-33976

CVE-2023-33976: TensorFlow is vulnerable to a denial-of-service crash due to a segfault in array_ops.upper_bound when not given a rank-2 tensor. The documented root cause is a segfault in array_ops.upper_bound; impact is a crash that can be triggered remotely as described in the advisory. The pub...

CVE-2023-33976 TensorFlow segfault in array_ops.upper_bound

TensorFlow is an end-to-end open source platform for machine learning. arrayops.upperbound causes a segfault when not given a rank 2 tensor. The fix will be included in TensorFlow 2.13 and will also cherrypick this commit on TensorFlow 2.12...

CVE-2023-33976 TensorFlow segfault in array_ops.upper_bound

TensorFlow is an end-to-end open source platform for machine learning. arrayops.upperbound causes a segfault when not given a rank 2 tensor. The fix will be included in TensorFlow 2.13 and will also cherrypick this commit on TensorFlow 2.12...