UBUNTU-CVE-2024-50134

In the Linux kernel, the following vulnerability has been resolved: drm/vboxvideo: Replace fake VLA at end of vbvamousepointershape with real VLA Replace the fake VLA at end of the vbvamousepointershape shape with a real VLA to fix a "memcpy: detected field-spanning write error" warning: 13.31981...

The vulnerability of the microprogrammed software of industrial routers SCALANCE M-800, related to insufficient protection of registration data, allows a hacker to replace other users’ 2FA tokens and expose the protected information.

The vulnerability of the microprogrammed software in industrial routers SCALANCE M-800 is related to insufficient protection for registration data. Exploiting this vulnerability could allow a hacker to replace other users’ 2FA tokens and expose the protected information...

The vulnerability of the Apache HttpClient client module of Apache HttpComponents allows a hacker to replace SSL servers.

The vulnerability of the Apache HttpClient client module of Apache HttpComponents is related to incorrect verification of SSL/TLS certificates. Exploiting this vulnerability allows a malicious actor to replace SSL servers by modifying the content in the distincted name DN field...

Replaced by `pqcrypto-mlkem`

This crate has been replaced by pqcrypto-mlkem, which provides a FIPS203-compatible implementation of ML-KEM...

Replaced by `pqcrypto-mldsa`

This crate has been replaced by pqcrypto-mldsa, which provides a FIPS204-compatible implementation of ML-DSA...

PT-2024-40927 · Unknown · Pqcrypto-Mlkem

Name of the Vulnerable Software and Affected Versions: pqcrypto-mlkem affected versions not specified Description: The issue concerns the replacement of a crate with pqcrypto-mlkem, which provides a FIPS203-compatible implementation of ML-KEM. Recommendations: At the moment, there is no informati...

DEBIAN-CVE-2022-49012

In the Linux kernel, the following vulnerability has been resolved: afs: Fix server-active leak in afsputserver The atomicread was accidentally replaced with atomicincreturn, which prevents the server from getting cleaned up and causes rmmod to hang with a warning: Can't purge s=00000001...

The vulnerability of the Payments component in Microsoft Edge and Google Chrome browsers allows a hacker to replace the user interface.

The vulnerability of the Payments component in Microsoft Edge and Google Chrome is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to replace the user interface...

CVE-2021-23192

...

CVE-2024-30117

A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances...

CVE-2024-30117

CVE-2024-30117 (HCL BigFix Platform) is a DLL hijack vulnerability where a dynamic search for a prerequisite library could allow an attacker to replace the correct file under certain conditions. Connected sources indicate affected versions on BigFix Server: 9.5.x prior to 9.5.25, 10.0.x prior to ...

The vulnerabilities of Google Chrome and Microsoft Edge involve security checks for standard elements, which allow attackers to replace the user interface.

The vulnerability of Google Chrome and Microsoft Edge is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...

HCL BigFix Platform 安全漏洞

HCL BigFix Platform is a suite of endpoint security management platforms from HCL Corporation, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in the HCL BigFix Platform that stems from the fact that a dynamic...

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers allows a hacker to replace the user’s interface.

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers is related to improper security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created HTML page...

PT-2024-23193 · Hcl +1 · Bigfix Platform

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances. The issue...

Description of the security update for Excel 2016: October 8, 2024 (KB5002643)

None None...

Description of the security update for SharePoint Server 2019: October 8, 2024 (KB5002647)

None None...

paste - no longer maintained

The creator of the crate paste has stated in the README.md that this project is not longer maintained as well as archived the repository Possible Alternatives - pastey: a fork of paste and is aimed to be a drop-in replacement with additional features for paste crate - withbuiltinmacros: crate...

SUSE-SU-2024:3158-3 Security update for postgresql16

This update for postgresql16 fixes the following issues: - Upgrade to 15.8 bsc1229013 - CVE-2024-7348: PostgreSQL relation replacement during pgdump executes arbitrary SQL. bsc1229013...

cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes

A flaw was found in OpenPrinting CUPS. In certain conditions, a remote attacker can add a malicious printer or directly hijack an existing printer by replacing the valid IPP URL with a malicious one. Also, it is possible that due to a lack of validation of IPP attributes returned by the server,...