‼ CVE-2022-46394 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Valhall r39p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23760 ‼
📖 Read
via "National Vulnerability Database".
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to versions 3.8 and was fixed in versions 3.7.7, 3.6.10, 3.5.14, and 3.4.17. This vulnerability was reported via the GitHub Bug Bounty program.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26956 ‼
📖 Read
via "National Vulnerability Database".
onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-27486 ‼
📖 Read
via "National Vulnerability Database".
xCAT is a toolkit for deployment and administration of computer clusters. In versions prior to 2.16.5 if zones are configured as a mechanism to secure clusters in XCAT, it is possible for a local root user from one node to obtain credentials to SSH to any node in any zone, except the management node of the default zone. XCAT zones are not enabled by default. Only users that use the optional zone feature are impacted. All versions of xCAT prior to xCAT 2.16.5 are vulnerable. This problem has been fixed in xCAT 2.16.5. Users making use of zones should upgrade to 2.16.5. Users unable to upgrade may mitigate the issue by disabling zones or patching the management node with the fix contained in commit `85149c37f49`.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2023-24533 ‼
📖 Read
via "National Vulnerability Database".
Multiplication of certain unreduced P-256 scalars produce incorrect results. There are no protocols known at this time that can be attacked due to this.📖 Read
via "National Vulnerability Database".
🕴 TSA Issues Urgent Directive to Make Aviation More Cyber Resilient 🕴
📖 Read
via "Dark Reading".
Will stricter cybersecurity requirements make flying safer? The TSA says yes, and sees it as a time-sensitive imperative.📖 Read
via "Dark Reading".
Dark Reading
TSA Issues Urgent Directive to Make Aviation More Cyber Resilient
Will stricter cybersecurity requirements make flying safer? The TSA says yes, and sees it as a time-sensitive imperative.
🕴 Edgeless Systems Raises $5M to Advance Confidential Computing 🕴
📖 Read
via "Dark Reading".
Confidential computing will revolutionize cloud security in the decade to come and has become a top C-level priority for industry leaders such as Google, Intel and Microsoft. Edgeless Systems is leading these advancements to ensure all data is always encrypted.📖 Read
via "Dark Reading".
Dark Reading
Edgeless Systems Raises $5M to Advance Confidential Computing
Confidential computing will revolutionize cloud security in the decade to come and has become a top C-level priority for industry leaders such as Google, Intel and Microsoft. Edgeless Systems is leading these advancements to ensure all data is always encrypted.
🕴 Emotet Resurfaces Yet Again After 3-Month Hiatus 🕴
📖 Read
via "Dark Reading".
More than two years after a major takedown by law enforcement, the threat group is once again proving just how impervious it is against disruption attempts.📖 Read
via "Dark Reading".
Dark Reading
Emotet Resurfaces Yet Again After 3-Month Hiatus
More than two years after a major takedown by law enforcement, the threat group is once again proving just how impervious it is against disruption attempts.
🕴 'Skinny' Cyber Insurance Policies Create Compliance Path 🕴
📖 Read
via "Dark Reading".
It's getting hard to buy cyber insurance, but not having it is not always an option. Low-coverage plans could bridge the gap.📖 Read
via "Dark Reading".
Dark Reading
'Skinny' Cyber-Insurance Policies Create Compliance Path
It's getting hard to buy cyber insurance, but not having it is not always an option. Low-coverage plans could bridge the gap.
‼ CVE-2023-24782 ‼
📖 Read
via "National Vulnerability Database".
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit.📖 Read
via "National Vulnerability Database".
🤔1
‼ CVE-2023-1283 ‼
📖 Read
via "National Vulnerability Database".
Code Injection in GitHub repository builderio/qwik prior to 0.21.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22891 ‼
📖 Read
via "National Vulnerability Database".
There exists a privilege escalation vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited by authorized users to reset passwords for other accounts.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22889 ‼
📖 Read
via "National Vulnerability Database".
SmartBear Zephyr Enterprise through 7.15.0 mishandles user-defined input during report generation. This could lead to remote code execution by unauthenticated users.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-27477 ‼
📖 Read
via "National Vulnerability Database".
wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's code generation backend, Cranelift, has a bug on x86_64 platforms for the WebAssembly `i8x16.select` instruction which will produce the wrong results when the same operand is provided to the instruction and some of the selected indices are greater than 16. There is an off-by-one error in the calculation of the mask to the `pshufb` instruction which causes incorrect results to be returned if lanes are selected from the second vector. This codegen bug has been fixed in Wasmtiem 6.0.1, 5.0.1, and 4.0.1. Users are recommended to upgrade to these updated versions. If upgrading is not an option for you at this time, you can avoid this miscompilation by disabling the Wasm simd proposal. Additionally the bug is only present on x86_64 hosts. Other platforms such as AArch64 and s390x are not affected.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33351 ‼
📖 Read
via "National Vulnerability Database".
Cross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before and fixed in v.1.3.7 allows attackers to escalte privileges via a crafted payload in the ticket message field.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33353 ‼
📖 Read
via "National Vulnerability Database".
Directory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via the file attachment directory setting.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33352 ‼
📖 Read
via "National Vulnerability Database".
An issue in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via a phar file upload in the ticket message field.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22892 ‼
📖 Read
via "National Vulnerability Database".
There exists an information disclosure vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited by unauthenticated users to read arbitrary files from Zephyr instances.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24777 ‼
📖 Read
via "National Vulnerability Database".
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24282 ‼
📖 Read
via "National Vulnerability Database".
An arbitrary file upload vulnerability in Poly Trio 8800 7.2.2.1094 allows attackers to execute arbitrary code via a crafted ringtone file.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22890 ‼
📖 Read
via "National Vulnerability Database".
SmartBear Zephyr Enterprise through 7.15.0 allows unauthenticated users to upload large files, which could exhaust the local drive space, causing a denial of service condition.📖 Read
via "National Vulnerability Database".