GHSA-JHCR-HPH9-G7WM vulnerabilities

Vulnerabilities for packages: trino...

PT-2023-36422 · Gnu +2 · Linux +2

Уязвимость функции drm mode setcrtc модуля drivers/gpu/drm/drm crtc.c драйвера DRM ядра операционной системы Linux связана с доступом к неинициализированной динамической памяти. Эксплуатация уязвимости может позволить нарушителю оказать влияние на целостность и доступность информации и выполнить...

CVE-2022-35768 Windows Kernel Elevation of Privilege Vulnerability

...

EUVD-2022-27168

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

EUVD-2021-30770

Visual Studio Code Spoofing Vulnerability...

nodejs: Incomplete validation of tls rejectUnauthorized parameter

A flaw was found in Node.js. If the Node.js HTTPS API is used incorrectly and "undefined" is passed for the "rejectUnauthorized" parameter, no error is returned, and the connections to servers with an expired certificate are accepted. The highest threat from this vulnerability is to integrity...

CVE-2020-29582 vulnerabilities

Vulnerabilities for packages: thingsboard...

Security Bulletin: Vulnerability in IBM WebSphere Application Server affects Tivoli Netcool Impact (CVE-2015-1885)

Summary IBM WebSphere Application Server is shipped as a component of Tivoli Netcool Impact. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin PI36211;8.5.0:...

CVE-2017-7473

...

Oracle Java SE/JRockit Remote Security Vulnerability (CNVD-2017-05957)

Java SE is short for Java Platform Standard Edition, based on the JDK and JRE, for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Oracle Java SE:7u131, 8u121, Java SE Embedded:8u121, and JRockit:R28.3.13 contain security...

Academics Make Theoretical Breakthrough in Random Number Generation

Two University of Texas academics have made what some experts believe is a breakthrough in random number generation that could have longstanding implications for cryptography and computer security. David Zuckerman, a computer science professor, and Eshan Chattopadhyay, a graduate student, publish...

Code injection

The evmverifyhmac function in security/integrity/evm/evmmain.c in the Linux kernel before 4.5 does not properly copy data, which makes it easier for local users to forge MAC values via a timing side-channel attack...

DTSA-165-1 horde3 - several vulnerabilities

Bulletin has no description...

DTSA-107-1 liferea - multiple vulnerabilities

Bulletin has no description...

typespeed keyboard touch-typist trainer format string bug

Format string bug in setgid games application...

sdd/librmt bulnerability

No description provided...

libhttpd buffer overflow

No description provided...

Vulnerability in the zlib Compression Library

...

Joe Text Editor DEADJOE Symbolic Link Vulnerability

...

CVE-2018-18128

...