CVE-2022-35689

Adobe Commerce versions 2.4.4-p1 and earlier and 2.4.5 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a user's minor feature. Exploitation of this issu...

Mozilla: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of Thunderbird users who use the Matrix chat protocol being vulnerable to a denial of service attack. An adversary sharing a room with a user could attack affected clients, making it not show all of a user's...

Minor update (2) for Vivaldi Android Browser 5.2

Head to the Google Play Store and download the browser. Alternatively, you can download Vivaldi from Uptodown, the Android app store. Your rating for our browser matters. ⭐️ ⭐️ ⭐️ ⭐️ ⭐️ Enjoy! Changelog The following is a list of changes since the first 5.2 stable, minor update : Chromium Upgraded...

Minor update (6) for Vivaldi Desktop Browser 5.2

Download Vivaldi The following improvements were made since the fifth 5.2 stable, minor update: Chromium Upgraded to 100.0.4896.133 includes fix for CVE-2022-1364 Main photo byVidar Nordli-Mathisen...

Minor update (5) for Vivaldi Desktop Browser 5.1

Download Vivaldi The following improvements were made since the fourth 5.1 stable, minor update: Chromium Upgraded to 98.0.4758.141 fixes CVE-2022-1096 Main photo byAlisa Anton...

Croatian Police arrests minor over A1 Telecom data breach & ransom demand

By Waqas The 14-year-old schoolboy was accused of stealing data of 100,000 Tele Operator A1 customers and demanding 150 Ethereum… This is a post from HackRead.com Read the original post: Croatian Police arrests minor over A1 Telecom data breach & ransom demand...

PT-2021-5438 · Mcafee · Mcafee Network Security Management

Name of the Vulnerable Software and Affected Versions: McAfee Network Security Manager versions prior to 10.1 Minor 7 Description: The issue is related to a Cross Site Scripting XSS vulnerability that allows a remote authenticated administrator to embed a XSS in the administrator interface via...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.9.4 packages and security update

Red Hat OpenShift Container Platform release 4.9.4 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.9. Red Hat Product Security has rated this update as having a...

Minor update (2) for Vivaldi Android Browser 4.2

Head to the Google Play Store and download the browser. Alternatively, you can download Vivaldi from Uptodown, the Android app store. Your rating for our browser matters. ⭐️ ⭐️ ⭐️ ⭐️ ⭐️ Enjoy! Changelog The following is a list of changes since the first 4.2 stable, minor update: Chromium Backport...

Ethereum Contains Consensus Flaw During Block Processing

Impact A vulnerability in the Geth EVM could cause a node to reject the canonical chain. Description A memory-corruption bug within the EVM can cause a consensus error, where vulnerable nodes obtain a different stateRoot when processing a maliciously crafted transaction. This, in turn, would lead...

OPENSUSE-SU-2021:1173-1 Security update for prosody

This update for prosody fixes the following issues: prosody was updated to 0.11.10: Security: MUC: Fix logic for access to affiliation lists CVE-2021-37601 boo1188976 https://prosody.im/security/advisory20210722/ Minor changes: prosodyctl: Add ‘limits’ to known globals to warn about misplacing it...

CVE-2020-36406

uWebSockets 18.11.0 and 18.12.0 has a stack-based buffer overflow in uWS::TopicTree::trimTree called from uWS::TopicTree::unsubscribeAll. NOTE: the vendor's position is that this is "a minor issue or not even an issue at all" because the developer of an application that uses uWebSockets should no...

Untrusted code may be run from an overridden address validator

This is a security release. SECURITY Fixes CVE-2021-34551, a complex RCE affecting Windows hosts. See SECURITY.md for details. The fix for this issue changes the way that language files are loaded. While they remain in the same PHP-like format, they are processed as plain text, and any code in th...

firefox security update

78.11.0-3.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 78.11.0-3 - Update to 78.11.0 build2 release 78.11.0-2 - Fix rhelminorversion for dist .el84 and .el8...

OPENSUSE-SU-2021:0728-1 Security update for prosody

This update for prosody fixes the following issues: prosody was updated to 0.11.9: Security: modlimits, prosody.cfg.lua: Enable rate limits by default certmanager: Disable renegotiation by default modproxy65: Restrict access to local c2s connections by default util.startup: Set more aggressive...

Minor update (3) for Vivaldi Android Browser 3.7

Head to the Google Play Store and download the browser. Alternatively, you can download Vivaldi from Uptodown, the Android app store. Your rating for our browser matters. ⭐️ ⭐️ ⭐️ ⭐️ ⭐️ Enjoy! Changelog The following is a list of changes since the second 3.7 stable, minor update : Backported patch...

SUSE: Security Advisory (SUSE-SU-2021:0297-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-7998 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a null pointer dereference during tty device unregistration in the Linux kernel. Multiple ttys try to claim the same minor number, causing a double unregistrati...

Fedora 33 : prosody (2021-a639ec5d6e)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-a639ec5d6e advisory. - Prosody 0.11.8 ============== This is a new minor release for the 0.11.x stable branch, it includes bug fixes and performance improvements! Upstream would...

SUSE SLES12 Security Update : openvswitch (SUSE-SU-2021:0284-1)

This update for openvswitch fixes the following issues : openvswitch was updated to 2.7.12 CVE-2020-27827: Fixed a memory leak when parsing lldp packets bsc1181345 A lot more minor bugs have been fixed with this openvswitch version. Please refer to the changelog of the openvswitch.rpm file in ord...