UBUNTU-CVE-2023-6679

A null pointer dereference vulnerability was found in dpllpinparentpinset in drivers/dpll/dpllnetlink.c in the Digital Phase Locked Loop DPLL subsystem in the Linux kernel. This issue could be exploited to trigger a denial of service...

phase-6.de Cross Site Scripting vulnerability OBB-3810064

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-40238

A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.47, 5.5 before 05.53.47, and 5.6 before 05.60.47 for certain Lenovo devices. Image parsing of crafted BMP logo files can copy data to a specific address duri...

The vulnerability of the microprogrammed protection system for the SEL-451 phase-change relay exists due to insufficient verification of input data. This allows a perpetrator to trigger a malfunction and lock out arbitrary services.

The vulnerability of the microprogrammed protection system for the SEL-451 phase-change relay exists due to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to cause malfunctions and lock out arbitrary services...

The vulnerability of the microprogrammed protection system for the SEL-451 phase switching relay, related to unlimited resource distribution or throttling, allows a intruder to cause a service failure.

The vulnerability of the microprogrammed protection system of the SEL-451 phase-switching relay exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor, operating remotely, to create attacks based on cross-site scenarios...

The vulnerability of the microprogrammed protection software of the SEL-411L phase-change relay arises from the lack of measures taken to protect the website structure. This allows attackers to execute attacks against authorized and authenticated users based on cross-site scenarios.

The vulnerability of the microprogrammed protection system of the SEL-411L phase-changing relay exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor, operating remotely, to execute attacks based on cross-site scenario...

The vulnerability of microprogrammed protection systems in the SCHWEitzer Engineering Laboratories SEL-451 phase-change relay, related to insufficient entropy, allows attackers to bypass the authentication process.

The vulnerability of the microprogrammed protection system of the SCHWEitzer Engineering Laboratories SEL-451 phase-change relay is related to insufficient entropy. Exploiting this vulnerability allows a malicious actor to bypass the authentication process...

The vulnerability of the microprogrammed protection software of the SCHWEitzer Engineering Laboratories SEL-411L phase-change relay arises due to insufficient verification of input data. This vulnerability allows a perpetrator to disclose the protected information.

The vulnerability of the microprogrammed protection software of the Schweitzer Engineering Laboratories SEL-411L phase-change relay exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

The vulnerability of the microprogrammed protection system for the SEL-451 phase-change order relay exists due to an unreliable authentication mechanism. This allows attackers to execute session hijacking attacks and bypass the authentication process.

The vulnerability of the SEL-451 phase-changing protection relay’s microprogramming software exists due to an unreliable authentication mechanism. Exploiting this vulnerability allows a malicious actor to perform session hijacking attacks and bypass the authentication process...

PT-2023-31304 · Asr +1 · Falcon +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in SIM management during the USIMPhase2init process. No additional details are provided about the estimated number ...

PT-2023-32256 · Eclipse +4 · Eclipse Openj9 +4

Name of the Vulnerable Software and Affected Versions: Eclipse OpenJ9 versions prior to 0.41.0 Description: The issue is related to a denial of service caused by a flaw when a shutdown signal SIGTERM, SIGINT or SIGHUP is received before the JVM has finished initializing. This can lead to an...

Symfony Security Vulnerabilities

Symfony is a PHP framework for web and console applications and a set of reusable PHP components from Symfony, Inc. A security vulnerability exists in Symfony that stems from a user identifier not changing between the authentication phase and a successful login...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2023-39281

A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrary code execution during the DXE phase...

CVE-2023-39281

A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrary code execution during the DXE phase...

Stack overflow

A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrary code execution during the DXE phase...

CVE-2023-39281

A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrary code execution during the DXE phase...

Insyde InsydeH2O Security Breach

Insyde InsydeH2O is a C-language source from Insyde Corporation of Taiwan, which implements the new technology "EFI/UEFI" specification designed to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O with kernel versions 5.0 through 5.5, whi...

What is Progressive Delivery ?

Delving Into the Essential Elements of Incremental Deployment Incremental deployment is an approach in the realm of software engineering, characterized by a phased release cycle. It allows the introduction of new features or updates to a select user community initially, before rolling them out to...

A Use Case for Transactions: Outbox Pattern Strategies in Spring Cloud Stream Kafka Binder

Other parts in this blog series Part 1: Introduction to Transactions in Spring Cloud Stream Kafka Applications Part 2: Producer Initiated Transactions in Spring Cloud Stream Kafka Applications Part 3: Synchronizing with External Transaction Managers in Spring Cloud Stream Kafka Applications Part ...