SUSE SLES15 Security Update : protobuf-c (SUSE-SU-2023:1979-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1979-1 advisory. - CVE-2022-48468: Fixed an unsigned integer overflow. bsc1210323 Tenable has extracted the preceding description block directly from the SUS...

SUSE-SU-2023:1979-1 Security update for protobuf-c

This update for protobuf-c fixes the following issues: - CVE-2022-48468: Fixed an unsigned integer overflow. bsc1210323...

LockBit Ransomware Now Targeting Apple macOS Devices

Threat actors behind the LockBit ransomware operation have developed new artifacts that can encrypt files on devices running Apple's macOS operating system. The development, which was reported by the MalwareHunterTeam over the weekend, appears to be the first time a big-game ransomware crew has...

protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 112, which stems from a Mozilla Maintenance Service write-lock bypass, where a local attacker can trick the Mozilla Maintenance...

CVE-2022-48468

A vulnerability was found in protobuf-c. This security flaw leads to an unsigned integer overflow in parserequiredmember...

SUSE CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

AZL-26159 CVE-2022-48468 affecting package protobuf-c for versions less than 1.4.1-1

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

UBUNTU-CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

Integer overflow

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

SUSE CVE-2023-29532

A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server. The update file can be replaced after the signature check, before the use, because the write-lock requested by the service does not...

protobuf-c 输入验证错误漏洞

protobuf-c is a C-based protocol buffer implementation. A security vulnerability exists in protobuf-c versions prior to 1.4.1, which stems from the presence of an unsigned integer overflow...

BlackVue DR750-2CH LTE 数据伪造问题漏洞

BlackVue DR750-2CH LTE is an in-vehicle full HD monitor from BlackVue. A security vulnerability exists in the BlackVue DR750-2CH LTE version v.1.0122022.10.26, which stems from not checking the authenticity of uploaded firmware. An attacker could exploit the vulnerability to upload a firmware tha...

CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

CVE-2022-48468

CVE-2022-48468 affects protobuf-c prior to v1.4.1, with an unsigned integer overflow in parse_required_member. Connected advisories confirm the issue across distributions (e.g., Astra Linux, AlmaLinux, Amazon Linux 2, and Mariner/CBL) and consistently cite protobuf-c before 1.4.1 as vulnerable. T...

CVE-2023-29532

The Mozilla Foundation Security Advisory describes this flaw as: A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server. The update file can be replaced after the signature check, before...

Mozilla Thunderbird < 102.10

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 102.10. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-15 advisory. - Mozilla developers Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the Mozilla Fuzzing Team...

CVE-2023-28093

A user with a compromised configuration can start an unsigned binary as a service...

CVE-2023-28093

A user with a compromised configuration can start an unsigned binary as a service...

CVE-2023-28093

Concrete details found in connected documents indicate a Pegasystems Synchronization Engine vulnerability (Pegasystem Synchronization Engine) affecting versions 3.1.1 through 3.1.27. The issue allows a user with non-administrative access to modify a client configuration and server URL, enabling p...