‼ CVE-2022-43919 ‼
📖 Read
via "National Vulnerability Database".
IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow an authenticated attacker with authorization to craft messages to cause a denial of service. IBM X-Force ID: 241354.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29935 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.count(op) && "operation was already replaced.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29932 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22874 ‼
📖 Read
via "National Vulnerability Database".
IBM MQ Clients 9.2 CD, 9.3 CD, and 9.3 LTS are vulnerable to a denial of service attack when processing configuration files. IBM X-Force ID: 244216.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29934 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect().📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30053 ‼
📖 Read
via "National Vulnerability Database".
TOTOLINK A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29939 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnv(mlir::spirv::TargetEnvAttr).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29941 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOp<mlir::sparse_tensor::SortOp>(mlir::sparse_tensor::SortOp.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29933 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30243 ‼
📖 Read
via "National Vulnerability Database".
Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30434 ‼
📖 Read
via "National Vulnerability Database".
IBM Storage Scale (IBM Spectrum Scale 5.1.0.0 through 5.1.2.9, 5.1.3.0 through 5.1.6.1 and IBM Elastic Storage Systems 6.1.0.0 through 6.1.2.5, 6.1.3.0 through 6.1.6.0) could allow a local user to cause a kernel panic. IBM X-Force ID: 252187.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29942 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::Type::isa<mlir::LLVM::LLVMVoidType.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30013 ‼
📖 Read
via "National Vulnerability Database".
TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnerability allows an attacker to execute arbitrary commands through the "command" parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30054 ‼
📖 Read
via "National Vulnerability Database".
TOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability. An attacker can obtain a stable root shell through a specially constructed payload.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38707 ‼
📖 Read
via "National Vulnerability Database".
IBM Cognos Command Center 10.2.4.1 could allow a local attacker to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 234179.📖 Read
via "National Vulnerability Database".
⚠ S3 Ep133: Apple takes “tight-lipped” to a whole new level ⚠
📖 Read
via "Naked Security".
Entertaining, educational, and all in plain English 🎧📖📖 Read
via "Naked Security".
Naked Security
S3 Ep133: Apple takes “tight-lipped” to a whole new level
Entertaining, educational, and all in plain English 🎧📖
⚠ World Password Day: 2 + 2 = 4 ⚠
📖 Read
via "Naked Security".
We've kept it short and simple, with no sermons, no judgmentalism, no tubthumping... and no BUY NOW buttons. Have a nice day!📖 Read
via "Naked Security".
Naked Security
World Password Day: 2 + 2 = 4
We’ve kept it short and simple, with no sermons, no judgmentalism, no tubthumping… and no BUY NOW buttons. Have a nice day!
⚠ PHP Packagist supply chain poisoned by hacker “looking for a job” ⚠
📖 Read
via "Naked Security".
I pwned you! Gizza job! You know it makes sense!📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🕴 Attackers Route Malware Activity Over Popular CDNs 🕴
📖 Read
via "Dark Reading".
One way to hide malicious activity is to make it look benign by blending in with regular traffic passing through content delivery networks (CDNs) and cloud service providers, according to a Netskope report.📖 Read
via "Dark Reading".
Dark Reading
Attackers Route Malware Activity Over Popular CDNs
One way to hide malicious activity is to make it look benign by blending in with regular traffic passing through content delivery networks (CDNs) and cloud service providers, according to a Netskope report.
‼ CVE-2023-29659 ‼
📖 Read
via "National Vulnerability Database".
A Segmentation fault caused by a floating point exception exists in libheif 1.15.1 using crafted heif images via the heif::Fraction::round() function in box.cc, which causes a denial of service.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26285 ‼
📖 Read
via "National Vulnerability Database".
IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow a remote attacker to cause a denial of service due to an error processing invalid data. IBM X-Force ID: 248418.📖 Read
via "National Vulnerability Database".