CYBERSECURITY INTELLIGENCE
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Frank Buss discovered that OpenSSL had a heap buffer over-read in ASN.1 content parsing. An attacker could possibly
It was discovered that Go Networking incorrectly handled certain Punycode-encoded labels in the idna package. An attacker could
It was discovered that uriparser incorrectly handled certain URI strings. An attacker could possibly use this issue to
Felipe Franciosi, Raphael Norwitz, and Peter Turschmid discovered that the iSCSI block driver in QEMU incorrectly handled certain
USN-8156-1 fixed a vulnerability in GDK-PixBuf. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04
It was discovered that Lodash was vulnerable to a prototype pollution issue in the zipObjectDeep function. An attacker
It was discovered that Cyborg did not properly enforce project ownership in the Accelerator Request (ARQ) API. An
An update for kpatch-patch is now available for Red Hat Enterprise Linux RHEL 9.4 Extended Update Support. Red
USN-8044-1 fixed a vulnerability in alsa-lib. This update provides the corresponding fix for alsa-lib on Ubuntu 20.04 LTS.
Akshat Sinha discovered that shell-quote improperly validated object-token inputs. An attacker could possibly use this issue to cause
An update for libsoup is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat
https://security-tracker.debian.org/tracker/DSA-6331-1
