Vulnerability of the PM_io parser function: <PMDEC>::read_face(), set_halfedge() in the Nef_2/PM_io parser component. This is part of the CGAL computational geometry algorithm library, which allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the PMioparser function in the Nef2/PMioparser.h component, located in the computational geometry library, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause servi...

TOTOLINK A7100RU 操作系统命令注入漏洞

The TOTOLINK A7100RU is a wireless router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in the TOTOlink A7100RU version V7.4cu.2313B20191024, which stems from the servername parameter of the set/delStaticDhcpRules method containing a command...

Vulnerability of the SM_io parser function: Decorator_::read_vertex(), set_first_out_edge() – components from Nef_S2/SM_io parser.h; library of computational geometry algorithms CGAL. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SMio parser function in the decorator::readvertex and setfirstoutedge components of the NefS2/SMio parser library, part of the Computational Geometry Library CGAL, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to...

GSD-2023-1001621 regulator: core: fix module refcount leak in set_supply()

regulator: core: fix module refcount leak in setsupply This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...

GSD-2023-1000554 usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq

usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000543 fbdev: fbcon: release buffer when fbcon_do_set_font() failed

fbdev: fbcon: release buffer when fbcondosetfont failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

PT-2023-33139 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a wrong empty schemes assumption under online tuning in the damon sysfs set schemes function. The actual impact and attack plausibility have not yet been proven...

Batloader Malware Abuses Legitimate Tools, Uses Obfuscated JavaScript Files in Q4 2022 Attacks

We discuss the Batloader malware campaigns we observed in the last quarter of 2022, including our analysis of Water Minyades-related events This is the intrusion set we track behind the creation of Batloader...

SUSE SLES12: libpython3_4m1_0 / libpython3_4m1_0-32bit / python3 / python3-base / etc (SUSE-SU-2023:0076-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0076-1 advisory. - CVE-2022-40899: Fixed an issue that could allow attackers to cause an excessive CPU usage via a crafted Set-Cookie header bsc1206673...

SUSE-SU-2023:0079-1 Security update for python-future

This update for python-future fixes the following issues: - CVE-2022-40899: Fixed an issue that could allow attackers to cause an excessive CPU usage via a crafted Set-Cookie header bsc1206673...

SUSE-SU-2023:0076-1 Security update for python3

This update for python3 fixes the following issues: - CVE-2022-40899: Fixed an issue that could allow attackers to cause an excessive CPU usage via a crafted Set-Cookie header bsc1206673...

Prototype Pollution

convict is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes via the set function in main.js and modify attributes such as proto, constructor, and other prototype base objects...

SUSE: Security Advisory (SUSE-SU-2023:0076-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-1002 · Google +3 · Android Kernel +3

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible memory corruption due to a double free in the adreno set param function of adreno gpu.c. This could lead to local escalation of privilege with no additional execution privileges...

Prototype Pollution

Overview dot-lens is a Simple, compiled dot lenses Affected versions of this package are vulnerable to Prototype Pollution via the set function in index.js file. PoC var dot = require"dot-lens" console.log"before:"+.test dot.set"proto.test","123" console.log"after:"+.test Details Prototype...

EulerOS Virtualization 2.9.1 : net-snmp (EulerOS-SA-2023-1198)

According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in net-snmp. A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds...

Linksys WUMC710 操作系统命令注入漏洞

The Linksys WUMC710 is a universal media connector from Linksys USA. A command injection vulnerability exists in the Linksys WUMC710 Wireless-AC Universal Media Connector version 1.0.02 build3 and prior versions. The vulnerability stems from the dosetNTP function in the httpd binary that uses...

CVE-2022-3927

The affected products store both public and private key that are used to sign and protect Custom Parameter Set CPS file from modification. An attacker that manages to exploit this vulnerability will be able to change the CPS file, sign it so that it is trusted as the legitimate CPS file. This iss...

CVE-2022-3927

The affected products store both public and private key that are used to sign and protect Custom Parameter Set CPS file from modification. An attacker that manages to exploit this vulnerability will be able to change the CPS file, sign it so that it is trusted as the legitimate CPS file. This iss...

CVE-2022-3927 The affected products store public and private key that are used to sign and protect custom parameter set files from modification.

The affected products store both public and private key that are used to sign and protect Custom Parameter Set CPS file from modification. An attacker that manages to exploit this vulnerability will be able to change the CPS file, sign it so that it is trusted as the legitimate CPS file. This iss...