K000139579: Node.js vulneraility CVE-2024-21891

Security Advisory Description Node.js depends on multiple built-in utility functions to normalize paths provided to node:fs functions, which can be overwitten with user-defined implementations leading to filesystem permission model bypass through path traversal attack. This vulnerability affects...

K000139577: Node.js vulnerability CVE-2024-21890

Security Advisory Description The Node.js Permission Model does not clarify in the documentation that wildcards should be only used as the last character of a file path. For example: --allow-fs-read=/home/node/.ssh/.pub will ignore pub and give access to everything after .ssh/. This misleading...

VulnCheck KEV: CVE-2020-1375

An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'...

CVE-2024-27202

A DOM-based cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

The Fundamentals of Cloud Security Stress Testing

״Defenders think in lists, attackers think in graphs," said John Lambert from Microsoft, distilling the fundamental difference in mindset between those who defend IT systems and those who try to compromise them. The traditional approach for defenders is to list security gaps directly related to...

PT-2024-4592 · Sap · Sap Netweaver As Java

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS Java affected versions not specified Description: The issue is related to unrestricted access to the Meta Model Repository services in SAP NetWeaver AS Java, allowing attackers to perform Denial of Service DoS attacks on the...

CVE-2023-43526

Memory corruption while querying module parameters from Listen Sound model client in kernel from user space...

CVE-2023-43525

Memory corruption while copying the sound model data from user to kernel buffer during sound model register...

CVE-2023-43526

The CVE-2023-43526 issue concerns memory corruption in Qualcomm chipsets when querying module parameters from the Listen Sound model client in the kernel from user space. Affected component: Listen Sound model client within the kernel. Underlying cause is described as memory corruption during par...

CVE-2023-43526 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption while querying module parameters from Listen Sound model client in kernel from user space...

CVE-2023-43525

CVE-2023-43525 describes a memory corruption vulnerability in Qualcomm audio components related to copying sound model data from user space to a kernel buffer during sound model registration. The issue affects Qualcomm audio-related components listed in the Android Pixel bulletin (CVE-2023-43525 ...

CVE-2023-43525 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption while copying the sound model data from user to kernel buffer during sound model register...

CVE-2023-43525 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption while copying the sound model data from user to kernel buffer during sound model register...

nodejs:20 security update

An update is available for module.nodejs-nodemon, nodejs-packaging, module.nodejs-packaging, nodejs-nodemon. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list...

RLSA-2024:1688 Important: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: vulnerable to timing variant of the Bleichenbacher attack against PKCS1 v1.5 padding Marvin CVE-2023-46809 nodejs: reading unprocessed HTT...

nodejs:20 security update

An update is available for nodejs-nodemon, module.nodejs, nodejs, module.nodejs-nodemon, module.nodejs-packaging, nodejs-packaging. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

RLSA-2024:1687 Important: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: vulnerable to timing variant of the Bleichenbacher attack against PKCS1 v1.5 padding Marvin CVE-2023-46809 nodejs: reading unprocessed HTT...

PT-2024-13099 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to memory corruption that occurs when querying module parameters from the Listen Sound model client in the kernel from user space. This can potentially lead to...

PT-2024-13098 · Linux · Linux

Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified Description: The issue involves memory corruption that occurs while copying sound model data from a user to a kernel buffer during the sound model registration process. This corruption can potentially lea...

PT-2024-25954 · Cybrosys Techno Solutions · Text Commander

Name of the Vulnerable Software and Affected Versions: Cybrosys Techno Solutions Text Commander module aka text commander versions 16.0 through 16.0.1 Description: A SQL injection vulnerability in the Text Commander module allows a remote attacker to gain privileges via the data parameter to...