2707 matches found
Updated chromium-browser-stable packages fix security vulnerability
1325699 High CVE-2022-2603: Use after free in Omnibox. Reported by Anonymous on 2022-05-16 1335316 High CVE-2022-2604: Use after free in Safe Browsing. Reported by Nan Wang@eternalsakura13 and Guang Gong of 360 Alpha Lab on 2022-06-10 1338470 High CVE-2022-2605: Out of bounds read in Dawn. Report...
Chromium: CVE-2022-2623 Use after free in Offline
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
PT-2022-4051
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 104.0.5112.79 Description The issue is related to a use after free in the offline mode of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via specific UI interactions if...
FreeBSD : chromium -- multiple vulnerabilities (96a41723-133a-11ed-be3b-3065ec8fd3ec)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 96a41723-133a-11ed-be3b-3065ec8fd3ec advisory. - Use after free in Omnibox. CVE-2022-2603 - Use after free in Safe Browsing. CVE-2022-2604 -...
What is ransomware and how can you defend your business from it?
Ransomware is a kind of malware used by cybercriminals to stop users from accessing their systems or files; the cybercriminals then threaten to leak, destroy or withhold sensitive information unless a ransom is paid. Ransomware attacks can target either the data held on computer systems known as...
CISA and ACSC Release Top 2021 Malware Strains
CISA and the Australian Cyber Security Centre ACSC have published a joint Cybersecurity Advisory on the top malware strains observed in 2021. Malicious cyber actors often use malware to covertly compromise and then gain access to a computer or mobile device. As malicious cyber actors have been...
KLA12600 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Out of boun...
GSD-2022-1004650 block: Fix handling of offline queues in blk_mq_alloc_request_hctx()
block: Fix handling of offline queues in blkmqallocrequesthctx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.124 by commit...
GSD-2022-1004500 block: Fix handling of offline queues in blk_mq_alloc_request_hctx()
block: Fix handling of offline queues in blkmqallocrequesthctx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.49 by commit...
GSD-2022-1004304 block: Fix handling of offline queues in blk_mq_alloc_request_hctx()
block: Fix handling of offline queues in blkmqallocrequesthctx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.6 by commit...
PT-2022-32566
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.6 Description The issue concerns the handling of offline queues in the blk mq alloc request hctx function. It was introduced in version v4.16 and fixed in version v5.18.6. The actual impact and attack...
PT-2022-32912
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.124 Description The issue concerns the handling of offline queues in the blk mq alloc request hctx function. It was introduced in version v4.16 and fixed in version v5.10.124. The actual impact and attack...
PT-2022-32762
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.49 Description The issue concerns the handling of offline queues in the blk mq alloc request hctx function. It was introduced in version v4.16 and fixed in version v5.15.49. The actual impact and attack...
Vulnerabilities fixed in Oracle Communications Applications
Oracle has fixed vulnerabilities in the following products: Communications ASAP Communications Billing and Revenue Management Communications BRM - Elastic Charging Engine Communications Design Studio Communications Instant Messaging Server Communications Offline Mediation Controller Communication...
Veeam Recovery Orchestrator May Timeout During Execution of a Replica Plan if the Source vCenter Is Offline
Article Applicability The hotfix patch on this article is only intended for use with Veeam Recovery Orchestrator 5.0.0.2768. Challenge When executing a Replica plan, Veeam Recovery Orchestrator may hang as it processes each VM in the plan. This hang will occur if two vCenters are used one...
PT-2022-37078
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state indicates the involvement of function...
[SECURITY] Fedora 36 Update: golang-github-theupdateframework-notary-0.7.0-6.fc36
The Notary project comprises a server and a client for running and interacting with trusted collections. See the service architecture documentation for more information. Notary aims to make the internet more secure by making it easy for people to publish and verify content. We often rely on TLS t...
CVE-2022-23719
PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests. An attacker with the ability to execute code on the target machine maybe able to exploit and spoof the local Java service using multiple attack vectors. A...