3304 matches found
CVE-2023-45287
Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS1 padding may leak timing...
ASB-A-300368868
Bulletin has no description...
GHSA-PJJW-QHG8-P2P9 vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa...
BELL-CVE-2023-42366
Bulletin has no description...
SUSE-SU-2023:4575-1 Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-40474: Fixed integer overflow causing out of bounds writes when handling invalid uncompressed video bsc1215796. - CVE-2023-40476: Fixed possible overflow using maxsublayersminus1 bsc1215793...
SUSE-SU-2023:4562-1 Security update for poppler
This update for poppler fixes the following issues: - CVE-2019-9545: Fixed an uncontrolled recursion issue that could cause a crash bsc1128114. - CVE-2022-37052: Fixed a crash that could be triggered when opening a crafted file bsc1214726. - CVE-2020-36023: Fixed a stack bugger overflow in...
BELL-CVE-2023-6228
Bulletin has no description...
BELL-CVE-2023-48234
Bulletin has no description...
BELL-CVE-2023-6176
Bulletin has no description...
OPENSUSE-SU-2023:0372-1 Security update for chromium
This update for chromium fixes the following issues: Chromium 119.0.6045.159 boo1217142 CVE-2023-5997: Use after free in Garbage Collection CVE-2023-6112: Use after free in Navigation Various fixes from internal audits, fuzzing and other initiatives...
BELL-CVE-2023-20592
Bulletin has no description...
BELL-CVE-2023-5868
Bulletin has no description...
BELL-CVE-2023-5870
Bulletin has no description...
CVE-2023-38473 vulnerabilities
Vulnerabilities for packages: avahi...
SUSE-SU-2023:4270-1 Security update for poppler
This update for poppler fixes the following issues: - CVE-2019-9545: Fixed an uncontrolled recursion issue that could cause a crash bsc1128114. - CVE-2022-37052: Fixed a crash that could be triggered when opening a crafted file bsc1214726...
Lazarus Unleash SIGNBT Malware in Latest Campaign
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The Lazarus Group has been identified as the mastermind behind a recent cyber campaign. They persistently targeted a software vendor, successfully compromising the vendors systems by exploiting software...
A cascade of compromise: unveiling Lazarus’ new campaign
Earlier this year, a software vendor was compromised by the Lazarus malware delivered through unpatched legitimate software. Whats remarkable is that these software vulnerabilities were not new, and despite warnings and patches from the vendor, many of the vendors systems continued to use the...
Apple Releases Security Advisories for Multiple Products
Apple has released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected device. CISA encourages users and administrators to review the following advisories and apply the necessary updates:...
OPENSUSE-SU-2023:0325-1 Security update for chromium
This update for chromium fixes the following issues: - Chromium 118.0.5993.117 boo1216549 CVE-2023-5472: Use after free in Profiles Various fixes from internal audits, fuzzing and other initiatives...