4408 matches found
mozilla: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2
The Mozilla Foundation's Security Advisory: Memory safety bugs are present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort, some of these could have been exploited to run arbitrary code...
SUSE-SU-2024:3252-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-35965: Fix not validating setsockopt user input bsc1224579. - CVE-2024-35933: Fixed a build regression bsc1224640. - CVE-2024-43883: Do not drop...
GHSA-W73R-8MM4-CFVF Withdrawn Advisory: Lunary Improper Authentication vulnerability
Withdrawn Advisory This advisory was incorrectly linked the the npm package lunary. The advisory is valid, but not for that package. Original Advisory A broken access control vulnerability exists prior to commit 1f043d8798ad87346dfe378eea723bff78ad7433 of lunary-ai/lunary. The saml.ts file allows...
CVE-2024-7756
A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to escalate privileges by accessing an embedded UEFI shell...
CVE-2024-6587 SSRF in berriai/litellm
A Server-Side Request Forgery SSRF vulnerability exists in berriai/litellm version 1.38.10. This vulnerability allows users to specify the apibase parameter when making requests to POST /chat/completions, causing the application to send the request to the domain specified by apibase. This request...
CVE-2024-46685
In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference in pcsgetfunction pinmuxgenericgetfunction can return NULL and the pointer 'function' was dereferenced without checking against NULL. Add checking of pointer 'function' in...
CVE-2024-46677 gtp: fix a potential NULL pointer dereference
In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When sockfdlookup fails, gtpencapenablesocket returns a NULL pointer, but its callers only check for error pointers thus miss the NULL pointer case. Fix it by returning an error point...
NewStart CGSL MAIN 6.02 : firefox Multiple Vulnerabilities (NS-SA-2024-0066)
The remote NewStart CGSL host, running version MAIN 6.02, has firefox packages installed that are affected by multiple vulnerabilities: - In Expat aka libexpat before 2.4.5, there is an integer overflow in storeRawNames. CVE-2022-25315 - It was possible to construct specific XSLT markup that woul...
CVE-2024-27367
An issue was discovered in Samsung Mobile Processor Exynos Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsirxscanind, there is no input validation check on a length coming from userspace, whi...
CVE-2024-27364
An issue was discovered in Mobile Processor, Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsirxroamedind, there is no input validation check on a length coming from userspace, which can lead ...
CVE-2024-27364
An issue was discovered in Mobile Processor, Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsirxroamedind, there is no input validation check on a length coming from userspace, which can lead ...
CVE-2024-27368
An issue was discovered in Samsung Mobile Processor Exynos Mobile Processor, Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsirxreceivedframeind, there is no input validation check on a length...
PT-2024-30278 Ā· Undefined Ā· Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: A potential issue has been identified, with a reference to an external link for more information. No details are provided about the nature of th...
CVE-2024-27368
An issue was discovered in Samsung Mobile Processor Exynos Mobile Processor, Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsirxreceivedframeind, there is no input validation check on a length...
CVE-2024-27365
CVE-2024-27365 affects Samsung Mobile Processor Exynos family: Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, and Exynos W930. The root cause is missing input validation for a length value from userspace in the function slsi_rx_blockack_ind()...
CVE-2024-27364
The CVE-2024-27364 issue affects Samsung Mobile Processor and Samsung Wearable Processor families (Exynos 980, 850, 1080, 1280, 1380, 1330, 1480, W920, W930). The root cause is missing input validation for a length originating from userspace in the function slsi_rx_roamed_ind(), which can cause a...
RHEL 8 : kernel (RHSA-2024:6206)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6206 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel:TCP-spoofed ghost ACKs and leak...
Malicious code in @diotoborg/consectetur-modi-reprehenderit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1907468f6304624269b2f29ee47460db951abb848af9ab72ed7f3230ee2bf3a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @diotoborg/dolor-earum-quia (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d700c9e6da7b84a19b42ed2466b0fe8ba51b97a24f185d84dd039164ff501398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Intel Connectivity Performance Suite Installer August 2024 Security Update
Intel has informed HP of a potential security vulnerability in some IntelĀ® Connectivity Performance Suite software installers, which might allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Intel has released updates to mitigate the...