3297 matches found
GSD-2022-1002091 scsi: pm8001: Fix abort all task initialization
scsi: pm8001: Fix abort all task initialization This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...
GHSA-822F-JFPG-HG7H Liferay Portal and Liferay DXP fails to check permissions to view sites/groups
Liferay Portal 7.3.7, 7.4.0, and 7.4.1, and Liferay DXP 7.2 fix pack 13, and 7.3 fix pack 2 does not properly check user permission when accessing a list of sites/groups, which allows remote authenticated users to view sites/groups via the user's site membership assignment UI...
GHSA-Q6H7-4QGW-2J9P vulnerabilities
Vulnerabilities for packages: k3d...
CVE-2022-21479 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2022-21417 vulnerabilities
Vulnerabilities for packages: mysql...
Security Bulletin: NVIDIA Data Center GPU Manager (DCGM) - March 2022
NVIDIA has released a software update for NVIDIAĀ® Data Center GPU Manager DCGM. The update addresses security issues that may lead to code execution, denial of service, and escalation of privileges. To protect your system, download and install the latest DCGM release from the CUDA repositories. G...
GHSA-57J2-W4CX-62H2 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, scala, management-api-for-apache-cassandra-4.0, cassandra-reaper...
CVE-2021-26401
LFENCE/JMP mitigation V2-2 may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs...
FATEK Automation FvDesigner
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: FATEK Automation Equipment: FvDesigner Vulnerabilities: Stack-based Buffer Overflow, Out-of-bounds Write, Out-of-bounds Read 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to...
CVE-2016-1239
duck before 0.10 did not properly handle loading of untrusted code from the current directory...
OPENSUSE-SU-2022:0498-1 Security update for expat
This update for expat fixes the following issues: - CVE-2022-23852: Fixed signed integer overflow in XMLGetBuffer bsc1195054. - CVE-2022-23990: Fixed integer overflow in the doProlog function bsc1195217...
BlackCat Ransomware group attacks on the rise
THREAT LEVEL: Red. For a detailed advisory, download the pdf file here The Blackcat Ransomware gang also known as ALPHV has targeted around 25 organizations belonging to multiple sectors globally since November 2021. The group has claimed responsibility for the recent cyber attack on Swissport...
CVE-2021-43301
Stack overflow in PJSUA API when calling pjsuaplaylistcreate. An attacker-controlled 'filenames' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation...
SUSE-SU-2022:0355-1 Security update for elasticsearch, elasticsearch-kit, kafka, kafka-kit, logstash, openstack-monasca-agent, openstack-monasca-log-metrics, openstack-monasca-log-persister, openstack-monasca-log-transformer, openstack-monasca-persister-java, openstack-monasca-persister-java-kit, openstack-monasca-thresh, openstack-monasca-thresh-kit, spark, spark-kit, venv-openstack-monasca, zookeeper, zookeeper-kit
This update for elasticsearch, elasticsearch-kit, kafka, kafka-kit, logstash, openstack-monasca-agent, openstack-monasca-log-metrics, openstack-monasca-log-persister, openstack-monasca-log-transformer, openstack-monasca-persister-java, openstack-monasca-persister-java-kit, openstack-monasca-thres...
The vulnerability of NETGEARās Wi-Fi router software, including models RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, arises from insufficient cleaning of input data. This allows attackers to execute arbitrary commands.
The vulnerability of NETGEAR Wi-Fi router microprogramming systems, such as RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...
CVE-2021-44464 Fresenius Kabi Agilia Connect Infusion System hard coded credentials
Vigilant Software Suite Mastermed Dashboard version 2.0.1.3 contains service credentials likely to be common across all instances. An attacker in possession of the password may gain privileges on all installations of this software...
CVE-2022-21331 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2022-21337 vulnerabilities
Vulnerabilities for packages: mysql...