CVE-2022-28552

Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a new song, delete it to the recycle bin, and SQL injection security problems will occur when emptying the recycle bin...

Attacks on Ukraine communications are a major part of the war

Since the start of the Russian invasion of Ukraine, the war on the battlefield has been accompanied by cyber attacks. Those attacks against critical infrastructure have knocked out banking and defense platforms, mostly by targeting several communication systems. In a timeline set up by NetBlocks,...

vim security update

8.0.1763-16.0.1 - - Remove upstream references Orabug: 31197557 2:8.0.1763-16.12 - CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository 2:8.0.1763-16.11 - CVE-2022-0413 vim: use after free in src/excmds.c - Fix specfile problems - Resolves: rhbz2048525 2:8.0.1763-16.10 - CVE-2022-04...

SUSE-SU-2022:0769-1 Security update for libcaca

This update for libcaca fixes the following issues: - CVE-2021-30498, CVE-2021-30499: If an image has a size of 0x0, when exporting, no data is written and space is allocated for the header only, not taking into account that sprintf appends a NUL byte bsc1184751, bsc1184752...

PT-2022-9092

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue concerns pointer problems in the firmware of some IntelR Processors. This could potentially allow a privileged user to escalate their privileges via local access...

How Data Analytics and AI Solve the Toughest Global Problems

By Waqas Can technologies combining data analytics and artificial intelligence save the world from its growing problems? This is a post from HackRead.com Read the original post: How Data Analytics and AI Solve the Toughest Global Problems...

PT-2022-11104

Name of the Vulnerable Software and Affected Versions Telephony application affected versions not specified Description The telephony application has a SQL Injection issue. Successful exploitation of this issue may cause privacy and security problems. Recommendations At the moment, there is no...

Microsoft Teams optimization not working for self-hosted Citrix Workspace app for Chrome OS users

Users who meet all below conditions use self-hosted/repackaged versions of Citrix Workspace app for Chrome OS from their own enterprise admin consoles AND have updated to Chrome OS Version 96 and above, AND have enabled Microsoft Teams optimization AND are onversion 2111 of Citrix Workspace app f...

CVE-2021-39898

In all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook token value which may allow access to the project which it was exported from...

GSD-2021-1001750 dma-debug: prevent an error message from causing runtime problems

dma-debug: prevent an error message from causing runtime problems This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit...

PT-2021-26220

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.9 Description: The issue is related to the dma-debug feature, which can cause runtime problems due to an error message. The actual impact and attack plausibility have not yet been proven. Recommendations:...

October 12, 2021—KB5006699 (OS Build 20348.288)

None None...

PT-2021-30867

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.18.5 Description The issue concerns some security problems in GStreamer. Recommendations For versions prior to 1.18.5, update to version 1.18.5 to resolve the issue...

SUSE-SU-2021:3187-1 Security update for samba

This update for samba fixes the following issues: - CVE-2021-20277: Fixed an out of bounds read in ldbhandlerfold bsc1183574. - CVE-2021-20254: Fixed a buffer overrun in sidstounixids bsc1184677. - CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs bsc1183572. - Spec file...

PT-2021-5190

Name of the Vulnerable Software and Affected Versions Huawei Smartphone affected versions not specified Description The issue is related to cryptographic problems in the Distributed File component of the HarmonyOS operating system. Successful exploitation may allow a remote attacker to read and...

EulerOS 2.0 SP9 : dhcp (EulerOS-SA-2021-2241)

According to the version of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP i.e., releases in the 4.0.x series or lower and releases in th...

OPENSUSE-SU-2021:2637-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2021-21704: Fixed security issues in pdofirebase module bsc1188035. - CVE-2021-21705: Fixed SSRF bypass in FILTERVALIDATEURL bsc1188037...

OPENSUSE-SU-2021:1091-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 78.12 fixed: Sending an email containing HTML links with spaces in the URL sometimes resulted in broken links fixed: Folder Pane display theme fixes for macOS fixed: Chat account settings did not always save as...

OPENSUSE-SU-2021:0973-1 Security update for libqt5-qtwebengine

This update for libqt5-qtwebengine fixes the following issues: Update to version 5.15.3 CVE fixes backported in chromium updates: - CVE-2020-16044: Use after free in WebRTC - CVE-2021-21118: Heap buffer overflow in Blink - CVE-2021-21119: Use after free in Media - CVE-2021-21120: Use after free i...

Advisory ROSA-SA-2021-1956

Software: procps-ng 3.3.10 OS: Cobalt 7.9 CVE-ID: CVE-2018-1126. CVE-Crit: CRITICAL. CVE-DESC: procps-ng before version 3.3.15 is vulnerable due to incorrect integer size in proc / alloc. , Which leads to truncation / integer overflow problems. This flaw is related to CVE-2018-1124. CVE-STATUS:...