‼ CVE-2022-35476 ‼
📖 Read
via "National Vulnerability Database".
OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbc0b.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38233 ‼
📖 Read
via "National Vulnerability Database".
XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::readMCURow() at /xpdf/Stream.cc.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38235 ‼
📖 Read
via "National Vulnerability Database".
XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar() at /xpdf/Stream.cc.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38237 ‼
📖 Read
via "National Vulnerability Database".
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan() at /xpdf/Stream.cc.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38236 ‼
📖 Read
via "National Vulnerability Database".
XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObj(Object*) at /xpdf/Lexer.cc.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38238 ‼
📖 Read
via "National Vulnerability Database".
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar() at /xpdf/Stream.cc.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38230 ‼
📖 Read
via "National Vulnerability Database".
XPDF commit ffaf11c was discovered to contain a floating point exception (FPE) via DCTStream::decodeImage() at /xpdf/Stream.cc.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38234 ‼
📖 Read
via "National Vulnerability Database".
XPDF commit ffaf11c was discovered to contain a segmentation violation via Lexer::getObj(Object*) at /xpdf/Lexer.cc.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38231 ‼
📖 Read
via "National Vulnerability Database".
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::getChar() at /xpdf/Stream.cc.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35434 ‼
📖 Read
via "National Vulnerability Database".
jpeg-quantsmooth before commit 8879454 contained a floating point exception (FPE) via /jpeg-quantsmooth/jpegqs+0x4f5d6c.📖 Read
via "National Vulnerability Database".
🕴 Microsoft Rolls Out Tamper Protection for Macs 🕴
📖 Read
via "Dark Reading".
The tamper protection feature detects attempts to modify files and processes for Microsoft Defender for Endpoints on macOS.📖 Read
via "Dark Reading".
Dark Reading
Microsoft Rolls Out Tamper Protection for Macs
The new feature detects attempts to modify files and processes for Microsoft Defender for Endpoints on macOS.
👍1
‼ CVE-2022-25799 ‼
📖 Read
via "National Vulnerability Database".
An open redirect vulnerability exists in CERT/CC VINCE software prior to 1.5.0. An attacker could send a link that has a specially crafted URL and convince the user to click the link. When an authenticated user clicks the link, the authenticated user's browser could be redirected to a malicious site that is designed to impersonate a legitimate website. The attacker could trick the user and potentially acquire sensitive information such as the user's credentials.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42052 ‼
📖 Read
via "National Vulnerability Database".
IPESA e-Flow 3.3.6 allows path traversal for reading any file within the web root directory via the lib/js/build/STEResource.res path and the R query parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2871 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) - Stored in GitHub repository notrinos/notrinoserp prior to 0.7.📖 Read
via "National Vulnerability Database".
🗓️ Developers still struggling with security issues during code reviews, study finds 🗓️
📖 Read
via "The Daily Swig".
The road to DevSecOps isn’t always the smoothest📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Developers still struggling with security issues during code reviews, study finds
The road to DevSecOps isn’t always the smoothest
👍1
⚠ US offers reward “up to $10 million” for information about the Conti gang ⚠
📖 Read
via "Naked Security".
Wanted - Reward Offered - Five unknown individuals (plus a man with a weird hat)📖 Read
via "Naked Security".
Naked Security
US offers reward “up to $10 million” for information about the Conti gang
Wanted – Reward Offered – Five unknown individuals (plus a man with a weird hat)
⚠ Chrome browser gets 11 security fixes with 1 zero-day – update now! ⚠
📖 Read
via "Naked Security".
Don't delay - patch today.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
👍1
🕴 7 Smart Ways to Secure Your E-Commerce Site 🕴
📖 Read
via "Dark Reading".
Especially if your e-commerce and CMS platforms are integrated, you risk multiple potential sources of intrusion, and the integration points themselves may be vulnerable to attack.📖 Read
via "Dark Reading".
Dark Reading
7 Smart Ways to Secure Your E-Commerce Site
Especially if your e-commerce and CMS platforms are integrated, you risk multiple potential sources of intrusion, and the integration points themselves may be vulnerable to attack.
‼ CVE-2022-37459 ‼
📖 Read
via "National Vulnerability Database".
Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to control the predictions for return addresses and potentially hijack code flow to execute arbitrary code via a side-channel attack, aka a "Retbleed" issue.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2021-45454 ‼
📖 Read
via "National Vulnerability Database".
Ampere Altra before SRP 1.08b and Altra Max? before SRP 2.05 allow information disclosure of power telemetry via HWmon.📖 Read
via "National Vulnerability Database".
🗓️ Swiss Post relaunches e-voting bug bounty program 🗓️
📖 Read
via "The Daily Swig".
Ethical hackers invited to stress test election infrastructure📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Swiss Post relaunches e-voting bug bounty program
Ethical hackers invited to stress test election infrastructure