2621 matches found
Oracle Essbase 安全漏洞
Oracle Essbase is an application from Oracle Corporation Oracle. Enables organizations to quickly generate insights from multidimensional data sets using what-if analysis and data visualization tools. An information disclosure vulnerability exists in the Security and Provisioning component of...
PT-2022-4696
Name of the Vulnerable Software and Affected Versions Oracle Essbase version 21.3 Description The issue is related to insufficient input validation in the Security and Provisioning component of Oracle Essbase. This allows a high-privileged attacker with logon access to the infrastructure to...
[SECURITY] Fedora 35 Update: butane-0.15.0-2.fc35
Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition...
CVE-2022-28372
On Verizon 5G Home LVSKIHP InDoorUnit IDU 3.4.66.162 and OutDoorUnit ODU 3.33.101.0 devices, the CRTC and ODU RPC endpoints provide a means of provisioning a firmware update for the device via crtcfwupgrade or crtcfwimage. The URL provided is not validated, and thus allows for arbitrary file uplo...
[SECURITY] Fedora 36 Update: butane-0.14.0-2.fc36
Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition...
[SECURITY] Fedora 36 Update: butane-0.15.0-1.fc36
Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition...
Satellite 6.11 Release
An update is available for libdb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Rocky Enterprise Software Foundation Satellite is a systems management tool for...
RLSA-2022:5498 Moderate: Satellite 6.11 Release
Rocky Enterprise Software Foundation Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitoring of multiple Linux deployments with a single centralized tool. Security Fixes: libsolv: Heap-based buffer overflow in testcasere...
CVE-2022-24893
ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK ESP-BLE-MESH, a memory corruption vulnerability can be triggered during provisioning, because there is no check for the SegN field of the Transaction Start PDU. This can result in memory corruption...
CVE-2022-24893
ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK "ESP-BLE-MESH", a memory corruption vulnerability can be triggered during provisioning, because there is no check for the "SegN" field of the Transaction Start PDU. This can result in memory...
CVE-2022-24893 Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption
ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK ESP-BLE-MESH, a memory corruption vulnerability can be triggered during provisioning, because there is no check for the SegN field of the Transaction Start PDU. This can result in memory corruption...
PT-2022-16964
Name of the Vulnerable Software and Affected Versions ESP-IDF versions 4.1 through 4.4 Description A memory corruption issue can be triggered in the ESP-BLE-MESH component during provisioning due to the lack of a check for the SegN field of the Transaction Start PDU. This can lead to memory...
CVE-2022-24893: Out-of-bounds Write
ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK ESP-BLE-MESH, a memory corruption vulnerability can be triggered during provisioning, because there is no check for the SegN field of the Transaction Start PDU. This can result in memory corruption...
Google Says ISPs Helped Attackers Infect Targeted Smartphones with Hermit Spyware
A week after it emerged that a sophisticated mobile spyware dubbed Hermit was used by the government of Kazakhstan within its borders, Google said it has notified Android users of infected devices. Additionally, necessary changes have been implemented in Google Play Protect — Android's built-in...
Securing your IoT with Edge Secured-core devices
A recent study conducted by Microsoft in partnership with Ponemon Institute included a survey of companies that have adopted IoT solutions and 65 percent of them mentioned that security is a top priority when implementing IoT. Attacks targeting IoT devices put businesses at risk. Impacted devices...
Securing your IoT with Edge Secured-core devices
A recent study conducted by Microsoft in partnership with Ponemon Institute included a survey of companies that have adopted IoT solutions and 65 percent of them mentioned that security is a top priority when implementing IoT. Attacks targeting IoT devices put businesses at risk. Impacted devices...
Malicious code in azure-arm-deviceprovisioningservices-samples-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e110c962e6c0af3bc7477b625634d62ce1af160cb49464d997d86733b1d083db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in azure-arm-deviceprovisioningservices-samples-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10a9ec2ad000c4ffc3f72d2a845340503f98e3ba6cb9b464867cc24bff5cd437 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1244 Malicious code in azure-arm-deviceprovisioningservices-samples-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10a9ec2ad000c4ffc3f72d2a845340503f98e3ba6cb9b464867cc24bff5cd437 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
