PT-2022-31067

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns the use of managed device resources in the rawnand denali component. It was introduced in version v4.17 and is fixed in Linux Kernel version v5.18.3. The actual impact and...

Sense AMM address can be manipulated, allowing unlimited mint of principal tokens

Lines of code Vulnerability details Lender's lend for Sense uses ISensex.swapUnderlyingForPTs output to determine the Illuminate PT amount to be minted for the user. x is a user supplied and not verified address, which can be precooked by a malicious user to return any inflated amount, that will ...

What’s New for Developers: June 2022

Read about our recent Terraform updates and managed database services, our latest Meet the Developer articles, and stream videos on edge computing...

Splunk Resource Permission Assignment Error Vulnerability

Splunk is a suite of data collection and analysis software from Splunk, Inc. The software is primarily used to collect, index, and analyze the data it generates, including data generated by all IT systems and infrastructure physical, virtual machines, and cloud.A resource privilege assignment err...

Malicious code in bootstrap-base-managed-designs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1b1a5e0de74c739046a3f531fc61f5adfaea7ca7205e7b80246e8eca4b97d02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-20138

In ACTIONMANAGEDPROFILEPROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app to send MANAGEDPROFILEPROVISIONED intent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2022-20138

In ACTIONMANAGEDPROFILEPROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app to send MANAGEDPROFILEPROVISIONED intent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

RLSA-2022:5046 Moderate: .NET 6.0 security and bugfix update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.106 and .NET Runtime 6.0.6...

PT-2022-14376 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-12L Description: A missing permission check in the ACTION MANAGED PROFILE PROVISIONED intent of DevicePolicyManagerService.java allows an unprivileged app to send the intent, potentially leading to...

Amazon EKS vs Azure Kubernetes Service

Managed Kubernetes services help organizations deploy, configure, and manage Kubernetes clusters. This article compares two of the biggest service providers: Amazon EKS and Azure Kubernetes Services...

Announcing 2022 Microsoft Security Excellence Awards winners

Spirits soared at the Microsoft Security Excellence Awards on June 5, 2022. And is it any wonder? The celebration marked the first time that Microsoft executives and Microsoft Intelligent Security Association MISA members had gathered in person in more than two years so it was a special night for...

CVE-2022-30190 (Follina) vulnerability in MSDT: description and counteraction

At the end of May, researchers from the naosec team reported a new zero-day vulnerability in Microsoft Support Diagnostic Tool MSDT that can be exploited using Microsoft Office documents. It allowed attackers to remotely execute code on Windows systems, while the victim could not even open the...

JmxMBeanServer Heap Buffer Overflow DoS

The vulnerability of the getMBeanInstantiator method in the JmxMBeanServer class of the Java Runtime Environment software platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

PT-2022-4734

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 104.0.5112.79 Description The issue is related to a use after free vulnerability in the Managed devices API, which can be exploited by a remote attacker using a specially crafted HTML page. This can potentially...

What’s New for Developers: May 2022

Read on to get information on Akamai’s new managed database service powered by Linode, to watch a fun video on DDoS attacks, and more...

org.jenkinsci.plugins:managed-scripts (>=0.0.1, <=0.2.0) potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (1.2)

org.jenkins-ci.plugins:config-file-provider MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkinsci.plugins:managed-scripts =0.0.1, =0.2.0 Source cves:...

org.jenkinsci.plugins:managed-scripts (>=0.0.1, <=0.2.0) potentially affected by CVE-2021-21642 via org.jenkins-ci.plugins:config-file-provider (1.2)

org.jenkins-ci.plugins:config-file-provider MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkinsci.plugins:managed-scripts =0.0.1, =0.2.0 Source cves:...

org.jenkinsci.plugins:managed-scripts (>=0.3, <=1.2.1) potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (2.0)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkinsci.plugins:managed-scripts =0.3, =1.2.1 Source cves:...

org.jenkinsci.plugins:managed-scripts (>=0.3, <=1.2.1) potentially affected by CVE-2021-21642 via org.jenkins-ci.plugins:config-file-provider (2.0)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkinsci.plugins:managed-scripts =0.3, =1.2.1 Source cves:...

org.jenkins-ci.plugins:jclouds-jenkins (>=2.11, <=2.13), org.jenkinsci.plugins:managed-scripts (1.2.4) potentially affected by CVE-2021-21645 via org.jenkins-ci.plugins:config-file-provider (2.13)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:jclouds-jenkins =2.11, =2.13 -...