CVE-2021-41272

CVE-2021-41272 affects the Besu Ethereum client (Java). Beginning with 21.10.0, changes to SHL/SHR/SAR caused a signed type coercion error for negative values in 32-bit integers. Consequence: on networks with mixed vulnerable/non‑vulnerable miners, forks may occur and affected transactions may be...

Stay Ahead of Threats With Cloud Workload Protection

When it comes to cloud-native applications, optimal security requires a modern, integrated, and automated approach that starts in development and extends to runtime protection. Cloud workload protection CWP helps make that goal possible by bringing major structural changes to software development...

Wiz magic shifts left

Fixing vulnerabilities and misconfigurations in the pipeline before deployment makes perfect sense - it reduces the overall threat footprint and saves time. Wiz offers customers a straightforward way to operationalize a Shift Left strategy...

json-smart: uncaught exception may lead to crash or information disclosure

A flaw was found in json-smart. When an exception is thrown from a function, but is not caught, the program using the library may crash or expose sensitive information. The highest threat from this vulnerability is to data confidentiality and system availability. In OpenShift Container Platform...

Red Hat OpenShift Container Platform安全漏洞

Red Hat OpenShift Container Platform is a suite of application platforms from Red Hat, Inc. that enables organizations to develop, deploy and manage existing container-based applications across physical, virtual and public cloud infrastructures. A security vulnerability exists in Red Hat OpenShif...

QSC Day 2 Recap: Innovation Makes for Better Defense, Improves Resilience

If 2020 was the year of disruption, then 2021 was characterized by high-profile—and low-profile—cyberattacks against the likes of JBS Supply, Colonial Pipeline, and Kaseya. Three years that underscored the need for organizations not only to defend themselves but to become resilient to weather and...

CVE-2021-26795

A SQL Injection vulnerability in /appliance/shiftmgn.php in TalariaX sendQuick Alert Plus Server Admin 4.3 before 8HF11 allows attackers to obtain sensitive information via a Roster Time to Roster Management...

GSD-2021-1002084 nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells

nvmem: Fix shift-out-of-bound UBSAN with byte size cells This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit...

UVI-2021-1002084 nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells

nvmem: Fix shift-out-of-bound UBSAN with byte size cells This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit...

UVI-2021-1001975 nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells

nvmem: Fix shift-out-of-bound UBSAN with byte size cells This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.213 by commit...

GSD-2021-1001953 nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells

nvmem: Fix shift-out-of-bound UBSAN with byte size cells This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.252 by commit...

UVI-2021-1001914 nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells

nvmem: Fix shift-out-of-bound UBSAN with byte size cells This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.290 by commit...

PT-2021-30440

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.213 Description The issue is related to a shift-out-of-bounds error in the nvmem module, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been...

PT-2021-26445

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.213 Description The issue is related to a shift-out-of-bounds error in the nvmem module, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been...

PT-2021-26384

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.4.290 Description: The issue is related to a shift-out-of-bounds error in the nvmem module, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been...

PT-2021-30418

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.252 Description The issue is related to a shift-out-of-bounds error in the nvmem module, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been...

PT-2021-26624

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15 Description: The issue is related to a shift-out-of-bounds error in the nvmem module, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been...

PT-2021-26468

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.155 Description The issue is related to a shift-out-of-bounds error in the nvmem module, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been...

PT-2021-26423

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.252 Description The issue is related to a shift-out-of-bounds error in the nvmem module. It was introduced in version v4.3 and fixed in version v4.14.252. The actual impact and attack plausibility have not...

PT-2021-30549

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.3 through v5.14.13 Description The issue is related to a shift-out-of-bounds error in the nvmem module, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet bee...