6883 matches found
MGASA-2022-0287 Updated webkit2 packages fix security vulnerability
The updated packages fix security vulnerabilities and other issues...
MGASA-2022-0291 Updated wavpack packages fix security vulnerability
Null pointer dereference in wvunpack CVE-2022-2476...
SUSE-SU-2022:2832-1 Security update for ucode-intel
This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220809 release bsc1201727: - CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise an SGX enclave INTEL-SA-00657. See also:...
Updated ruby-sinatra packages fix security vulnerability
Sinatra before 2.2.0 does not validate that the expanded path matches publicdir when serving static files. CVE-2022-29970...
Upgraded Q -> H from 210 [1660349369322]
Judge has assessed an item in Issue 210 as High risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...
TIBCO Security Advisory: August 9, 2022 - TIBCO FTL -CVE-2022-30573
TIBCO FTL Privilege Escalation Original release date: August 9, 2022 Last revised: --- CVE-2022-30573 Source: TIBCO SoftwareInc. Products Affected TIBCO FTL - Community Edition versions 6.0.0 through 6.8.0 TIBCO FTL - Developer Edition versions 6.0.1 through 6.8.0 TIBCO FTL - Enterprise Edition...
CLSA-2022-1659636455 Fix CVE(s): CVE-2022-21127, CVE-2021-0127, CVE-2022-21151, CVE-2022-21166, CVE-2021-33120, CVE-2021-33117, CVE-2022-21125, CVE-2021-0146, CVE-2021-0145, CVE-2022-21123
SECURITY UPDATE: New microcode data file 2022-05-10 - New microcodes: sig 0x00090672, pfmask 0x03, 2022-03-03, rev 0x001f, size 212992 sig 0x00090675, pfmask 0x03, 2022-03-03, rev 0x001f, size 212992 sig 0x000906a3, pfmask 0x80, 2022-03-24, rev 0x041c, size 212992 sig 0x000906a4, pfmask 0x80,...
firefox security update
91.12.0-2.0.1 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 91.12.0-1 - Update to 91.12.0 build1...
Gootkit Loader Resurfaces with Updated Tactic to Compromise Targeted Computers
The operators of the Gootkit access-as-a-service AaaS malware have resurfaced with updated techniques to compromise unsuspecting victims. "In the past, Gootkit used freeware installers to mask malicious files; now it uses legal documents to trick users into downloading these files," Trend Micro...
Gootkit Loader’s Updated Tactics and Fileless Delivery of Cobalt Strike
Gootkit has been known to use fileless techniques to drop Cobalt Strike and other malicious payloads. Insights from a recent attack reveal updates in its tactics...
Western Digital My Cloud Multiple Products 5.0 < 5.23.114 Multiple Vulnerabilities (WDC-22011)
Multiple Western Digital My Cloud products are prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...
Fedora: Security Advisory for golang-github-path-network-mmproxy (FEDORA-2022-3969b64d4b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 35 Update: golang-github-nxadm-tail-1.4.6-4.fc35
Go package for reading from continously updated files tail -f...
Updated golang packages fix security vulnerability
net/http: improper sanitization of Transfer-Encoding header The HTTP/1 client accepted some invalid Transfer-Encoding headers as indicating a "chunked" encoding. This could potentially allow for request smuggling, but only if combined with an intermediate server that also improperly failed to...
Upgraded Q -> M from 358 [1657932904826]
Judge has assessed an item in Issue 358 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...
Fedora: Security Advisory for pypy3.8 (FEDORA-2022-b499f2a9c6)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Sql injection
Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection. HPE has provided the following updated modules to resolve these vulnerabilities. HPE IceWall SSO version 10.0 certd library Patch 9 for RHEL and HPE IceWall SS...
CVE-2022-28623
Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection. HPE has provided the following updated modules to resolve these vulnerabilities. HPE IceWall SSO version 10.0 certd library Patch 9 for RHEL and HPE IceWall SS...