1261 matches found
Information Cards Module vulnerable to Cross-site Scripting
A vulnerability was found in Information Cards Module and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 1.0 is able to address this issue. The name of the patch is...
GHSA-R894-5R7V-7RX3 easy-scrypt Observable Timing Discrepancy vulnerability
A vulnerability, which was classified as problematic, was found in agnivade easy-scrypt. Affected is the function VerifyPassphrase of the file scrypt.go. The manipulation leads to observable timing discrepancy. Upgrading to version 1.0.0 can address this issue. The name of the patch is...
DLA-3253-1 openvswitch - security update
Bulletin has no description...
DLA-3256-1 xorg-server - security update
Bulletin has no description...
DSA-5306-1 gerbv - security update
Bulletin has no description...
Unspecified Vulnerability in ZOHO ManageEngine Device Control Plus
ZOHO ManageEngine Device Control Plus is a USB device control software from ZOHO USA. It is used to control, block and monitor all removable devices connected to the computer. A security vulnerability exists in ZOHO ManageEngine Device Control Plus version 10.1.2228.15 that originates from the...
DSA-5305-1 libksba - security update
Bulletin has no description...
DSA-5301-1 firefox-esr - security update
Bulletin has no description...
DLA-3236-1 openexr - security update
Bulletin has no description...
DLA-3233-1 leptonlib - security update
Bulletin has no description...
PT-2022-21941 · Intel · Intel Wapi Security
Name of the Vulnerable Software and Affected Versions: IntelR WAPI Security software for Windows 10/11 versions prior to 22.2150.0.1 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable information disclosure via local access...
DSA-5267-1 pysha3 - security update
Bulletin has no description...
DLA-3164-1 python-django - security update
Bulletin has no description...
Point-of-sale malware used to steal 167,000 credit cards
In the 19 months between February 2021 and September 2022, two point-of-sale POS malware operators have stolen more than 167,000 payment records, mainly from the US, according to researchers at Group-IB. The researchers were able to retrieve information about infected machines and compromised...
DLA-3141-1 wordpress - security update
Bulletin has no description...
DSA-5250-1 dbus - security update
Bulletin has no description...
DLA-3136-1 barbican - security update
Bulletin has no description...
Spyware disguises itself as Zoom downloads
Zoom video call software continues to be a staple in work environments. Despite a slow, post-lockdown easing back to the "old normal," many businesses still have remote workers, or people working in different geographies. It's no surprise then to see criminals continuing to abuse Zoom's popularit...
FCC moves to block robotexts
The American people are fed up with scam texts, and we need to use every tool we have to do something about it. This is what Jessica Rosenworcel, Chairwoman of the US Federal Communications Commission FCC said after releasing a plan that will require mobile carriers to block "robotext" text...