GPS Signals Are Being Disrupted in Russian Cities

Navigation system monitors have seen a recent uptick in interruptions since Ukraine began launching long-range drone attacks...

CVE-2022-23523

In versions prior to 0.8.1, the linux-loader crate uses the offsets and sizes provided in the ELF headers to determine the offsets to read from. If those offsets point beyond the end of the file this could lead to Virtual Machine Monitors using the linux-loader crate entering an infinite loop if...

CVE-2022-23523

CVE-2022-23523 affects rust-vmm/linux-loader. In versions before 0.8.1, the loader uses offsets/sizes from ELF headers to locate data. If an ELF header is crafted so these offsets point beyond the file end, Virtual Machine Monitors loading kernels with linux-loader could enter an infinite loop. T...

GHSA-52H2-M2CF-9JH6 linux-loader reading beyond EOF could lead to infinite loop

Impact The linux-loader crate used the offsets and sizes provided in the ELF headers to determine the offsets to read from. If those offsets pointed beyond the end of the file this could lead to an infinite loop. Virtual Machine Monitors using the linux-loader crate could enter an infinite loop i...

‘Dark Ships’ Emerge From the Shadows of the Nord Stream Mystery

Satellite monitors discovered two vessels with their trackers turned off in the area of the pipeline prior to the suspected sabotage in September...

Bifrost 授权问题漏洞

Bifrost is brokercap individual developers for production environments for MySQL, MariaDB synchronization to Redis, ClickHouse, Elasticsearch and other services, heterogeneous middleware . A security vulnerability exists in Bifrost versions prior to 1.8.8. An attacker exploiting this vulnerabilit...

Security Bulletin: IBM Tivoli Netcool System Service Monitors/Application Service Monitors is affected by multiple OpenSSL vulnerabilities

Abstract A number of security vulnerabilities have been discovered in the OpenSSL libraries included in IBM Tivoli Netcool System Service Monitors/Application Service Monitors. Content VULNERABILITY DETAILS: CVE Ids: CVE-2012-2131 CVE-2012-2110 CVE-2012-0884 CVE-2012-0050 CVE-2011-4108...

SUSE-SU-2022:2642-1 Security update for xscreensaver

This update for xscreensaver fixes the following issues: - CVE-2021-34557: Fixed potential crash and unlock while disconnecting video output with more than 10 monitors bsc1186918...

Authorization Bypass

github.com/sourcegraph/sourcegraph is vulnerable to authorization bypass. The vulnerability exists because the objects are not properly restricted in code monitors which allows an attacker to override data...

CVE-2022-31154

Sourcegraph is an opensource code search and navigation engine. It is possible for an authenticated Sourcegraph user to edit the Code Monitors owned by any other Sourcegraph user. This includes being able to edit both the trigger and the action of the monitor in question. An attacker is not able ...

Code injection

Sourcegraph is an opensource code search and navigation engine. It is possible for an authenticated Sourcegraph user to edit the Code Monitors owned by any other Sourcegraph user. This includes being able to edit both the trigger and the action of the monitor in question. An attacker is not able ...

CVE-2022-31154

CVE-2022-31154 affects Sourcegraph (code search/navigation). An authenticated user can edit Code Monitors owned by other users, allowing override of trigger and action data without reading monitor contents. Root cause is improper restrictions on Code Monitors; no read access gained. The issue is ...

CVE-2022-31154 Indirect Object Access in Sourcegraph Code Monitoring

Sourcegraph is an opensource code search and navigation engine. It is possible for an authenticated Sourcegraph user to edit the Code Monitors owned by any other Sourcegraph user. This includes being able to edit both the trigger and the action of the monitor in question. An attacker is not able ...

PT-2022-20569 · Sourcegraph · Sourcegraph

Name of the Vulnerable Software and Affected Versions: Sourcegraph versions prior to 3.42 Description: The issue allows an authenticated Sourcegraph user to edit Code Monitors owned by any other Sourcegraph user, including editing the trigger and action of the monitor. However, an attacker cannot...

GHSA-M93H-5QMX-PPHG Improper Authentication in Jenkins

In Jenkins before versions 2.44 and 2.32.2, low privilege users were able to act on administrative monitors due to them not being consistently protected by permission checks SECURITY-371...

Privilege Escalation

Sourcegraph is vulnerable to side-channel attack. The attack is possible because the library does not properly exclude the private source code in the Code Monitoring , allowing an authenticated attacker to create many Code Monitors to receive confirmation that a specific string exists...

Access Restriction Bypass

Overview Affected versions of this package are vulnerable to Access Restriction Bypass. Strings in private source code could be guessed by an authenticated but unauthorized actor. This issue affects the Saved Searches and Code Monitoring features. A successful attack would require an authenticate...

Side-Channel Attack

github.com/sourcegraph/sourcegraph is vulnerable to side channel attack. The attack is possible because the library does not properly exclude the private source code search results in 'searchresults.go' , allowing an authenticated attacker to check specific string and API keys exists in private...

Launched App Stuck In 1 Monitor When 4 Or More Monitors Are Used

When Published Apps are launched through Workspace App and the Endpoint Device is using 4 monitors or more, they always open in the main screen monitor, and once the Published App is moved to another monitor and is maximized, the Published App goes to the original monitor where it started. Whethe...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Tivoli Netcool System Service Monitors/Application Service Monitors

Summary There is a security advisory for openSSL1.1.1g which is used by IBM Tivoli Netcool System Service Monitors/Application Service Monitors 4.0.1 Vulnerability Details CVEID: CVE-2021-3449 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a NULL pointer dereference in...