Apple Security Advisory 2023-07-24-4
Apple Security Advisory 2023-07-24-4 - macOS Ventura 13.5 addresses bypass, code execution, out of bounds read, and use-after-free vulnerabilities.
View ArticleUbuntu Security Notice USN-6246-1
Ubuntu Security Notice 6246-1 - It was discovered that the IP-VLAN network driver for the Linux kernel did not properly initialize memory in some situations, leading to an out-of- bounds write...
View ArticleUbuntu Security Notice USN-6129-2
Ubuntu Security Notice 6129-2 - USN-6129-1 fixed a vulnerability in Avahi. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. It was discovered...
View ArticleJoomla VirtueMart 2.6.12.2 SQL Injection
Joomla VirtueMart component version 2.6.12.2 suffers from a remote SQL injection vulnerability.
View ArticleUbuntu Security Notice USN-6244-1
Ubuntu Security Notice 6244-1 - Tavis Ormandy discovered that some AMD processors did not properly handle speculative execution of certain vector register instructions. A local attacker could use this...
View ArticleJournal Management Software 1.2.4 SQL Injection
Journal Management Software version 1.2.4 suffers from a remote SQL injection vulnerability.
View ArticleApple Security Advisory 2023-07-24-5
Apple Security Advisory 2023-07-24-5 - macOS Monterey 12.6.8 addresses code execution, out of bounds read, and use-after-free vulnerabilities.
View ArticleUbuntu Security Notice USN-6247-1
Ubuntu Security Notice 6247-1 - David Leadbeater discovered that the netfilter IRC protocol tracking implementation in the Linux Kernel incorrectly handled certain message payloads in some situations....
View ArticleUbuntu Security Notice USN-5807-3
Ubuntu Security Notice 5807-3 - USN-5807-1 fixed a vulnerability in libXpm. This update provides the corresponding update for Ubuntu 14.04 ESM. Marco Ivaldi discovered that libXpm incorrectly handled...
View ArticleApple Security Advisory 2023-07-24-6
Apple Security Advisory 2023-07-24-6 - macOS Big Sur 11.7.9 addresses code execution, out of bounds read, and use-after-free vulnerabilities.
View ArticleUbuntu Security Notice USN-6248-1
Ubuntu Security Notice 6248-1 - It was discovered that the network queuing discipline implementation in the Linux kernel contained a null pointer dereference in some situations. A local attacker could...
View ArticleApple Security Advisory 2023-07-24-7
Apple Security Advisory 2023-07-24-7 - tvOS 16.6 addresses bypass, code execution, and use-after-free vulnerabilities.
View ArticleUbuntu Security Notice USN-6245-1
Ubuntu Security Notice 6245-1 - Adam Bell discovered that Trove incorrectly handled arguments to the backup command. A remote attacker could possibly use this issue to execute arbitrary code.
View ArticleETSI WEBstore 2023 Cross Site Scripting
ETSI WEBstore 2023 suffers from a persistent cross site scripting vulnerability.
View ArticleKernel Live Patch Security Notice LSN-0096-1
It was discovered that the Broadcom FullMAC USB WiFi driver in the Linux kernel did not properly perform data buffer size validation in some situations. A physically proximate attacker could use this...
View ArticleUbuntu Security Notice USN-6249-1
Ubuntu Security Notice 6249-1 - Ruihan Li discovered that the memory management subsystem in the Linux kernel contained a race condition when accessing VMAs in certain conditions, leading to a...
View ArticleApple Security Advisory 2023-07-24-8
Apple Security Advisory 2023-07-24-8 - watchOS 9.6 addresses bypass, code execution, and use-after-free vulnerabilities.
View ArticleDebian Security Advisory 5458-1
Debian Linux Security Advisory 5458-1 - Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in bypass of sandbox restrictions, information disclosure, reduced...
View ArticleVMWare Aria Operations For Networks Remote Command Execution
VMWare Aria Operations for Networks (vRealize Network Insight) is vulnerable to command injection when accepting user input through the Apache Thrift RPC interface. This vulnerability allows a remote...
View ArticleRed Hat Security Advisory 2023-4276-01
Red Hat Security Advisory 2023-4276-01 - An update is now available for Red Hat DevWorkspace Operator. Red Hat Product Security has rated this update as having a security impact of Moderate.
View ArticleUbuntu Security Notice USN-6250-1
Ubuntu Security Notice 6250-1 - Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux kernel did not properly perform permission checks in certain...
View ArticleRoomCast TA-2400 Cleartext Private Key / Improper Access Control
The RoomCast TA-2400, versions 1.0-3.1+, has multiple critical security vulnerabilities, including clear-text storage of sensitive information within executables, improper access control, improper...
View ArticleRed Hat Security Advisory 2023-4282-01
Red Hat Security Advisory 2023-4282-01 - The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and...
View ArticleRed Hat Security Advisory 2023-4283-01
Red Hat Security Advisory 2023-4283-01 - OpenStack Networking is a virtual network service for OpenStack. Just as OpenStack Compute provides an API to dynamically request and configure virtual servers,...
View ArticleDebian Security Advisory 5459-1
Debian Linux Security Advisory 5459-1 - Tavis Ormandy discovered that under specific microarchitectural circumstances, a vector register in "Zen 2" CPUs may not be written to 0 correctly. This flaw...
View Article