1259 matches found
GSD-2022-1005511 kbuild: dummy-tools: avoid tmpdir leak in dummy gcc
kbuild: dummy-tools: avoid tmpdir leak in dummy gcc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...
GHSA-PP8R-VV2J-9J5V vulnerabilities
Vulnerabilities for packages: efs-utils...
DLA-3090-1 php-horde-turba - security update
Bulletin has no description...
DSA-5218-1 zlib - security update
Bulletin has no description...
DSA-5216-1 libxslt - security update
Bulletin has no description...
Duplicate Advisory: KubeVirt arbitrary host file read from the VM
Duplicate Advisory This advisory is a duplicate of GHSA-qv98-3369-g364. This link is maintained to preserve external references. Original Description Summary As part of a Kubevirt audit performed by NCC group, a finding dealing with systemic lack of path sanitization which leads to a path travers...
How to secure a Windows PC for your kids
With the return to school fast approaching, it's time to ready the things your kids will need to pass the next year with flying colors. Increasingly, that means computing devices, which means you'll need to spend time thinking about the safety and security of what they will be using. In our "Back...
Twilio breached after social engineering attack on employees
Cloud-based communication platform provider Twilio has announced a breach via a social engineering attack on employees. On August 4, 2022, Twilio says it became aware of unauthorized access to information related to a limited number of Twilio customer accounts, through the social engineering atta...
Out-Of-Bounds Read
vim:sid is vulnerable to out of bounds read. A remote attacker is able to perform out of bound reads...
New Woody RAT Malware Being Used to Target Russian Organizations
An unknown threat actor has been targeting Russian entities with a newly discovered remote access trojan called Woody RAT for at least a year as part of a spear-phishing campaign. The advanced custom backdoor is said to be delivered via either of two methods: archive files or Microsoft Office...
DSA-5193-1 firefox-esr - security update
Bulletin has no description...
DSA-5192-1 openjdk-17 - security update
Bulletin has no description...
DSA-5186-1 djangorestframework - security update
Bulletin has no description...
DSA-5183-1 wpewebkit - security update
Bulletin has no description...
CVE-2020-29508
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Improper Input Validation Vulnerability...
Dell BSAFE 安全漏洞
Dell BSAFE Micro Edition Suite is a development toolkit that provides encryption, certificate, and transport layer security for c/c++ applications, devices, and systems.Dell BSAFE is a security software product that supports cryptographic algorithms, certificate chain validation, and Transport...
GSD-2022-1003868 powerpc/xics: fix refcount leak in icp_opal_init()
powerpc/xics: fix refcount leak in icpopalinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...
GSD-2022-1002887 staging: rtl8712: fix uninit-value in usb_read8() and friends
staging: rtl8712: fix uninit-value in usbread8 and friends This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...