Aggregator

Why EU encryption policy needs technical and civil society input

Help Net Security
7 months ago

In this Help Net Security interview, Bart Preneel, Full Professor at University of Leuven, unpacks the European Commission’s encryption agenda, urging a balanced, technically informed approach to lawful access that safeguards privacy, security, and fundamental rights across the EU. Given the European Commission’s aim to enable lawful access to encrypted data, how can we reconcile this with the technical consensus that introducing such access points inherently weakens encryption? While “lawful access to encrypted data based … More →

The post Why EU encryption policy needs technical and civil society input appeared first on Help Net Security.

Mirko Zorz

CVE-2022-3643 | Xen on Linux NIC Interface denial of service (DLA 3244-1 / Nessus ID 236642)

Vuldb Updates
7 months ago
A vulnerability was found in Xen on Linux. It has been classified as problematic. Affected is an unknown function of the component NIC Interface Handler. The manipulation leads to denial of service. This vulnerability is traded as CVE-2022-3643. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2022-3707 | Linux Kernel up to 6.1-rc2 Intel GVT-g Graphics Driver intel_gvt_dma_map_guest_page double free (Nessus ID 236642)

Vuldb Updates
7 months ago
A vulnerability has been found in Linux Kernel up to 6.1-rc2 and classified as critical. This vulnerability affects the function intel_gvt_dma_map_guest_page of the component Intel GVT-g Graphics Driver. The manipulation leads to double free. This vulnerability was named CVE-2022-3707. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-4095 | Linux Kernel up to 5.19.1 rtl8712_cmd.c cmd_hdl_filter use after free (Nessus ID 236642)

Vuldb Updates
7 months ago
A vulnerability was found in Linux Kernel up to 5.19.1. It has been declared as problematic. Affected by this vulnerability is the function cmd_hdl_filter of the file drivers/staging/rtl8712/rtl8712_cmd.c. The manipulation leads to use after free. This vulnerability is known as CVE-2022-4095. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-3523 | Linux Kernel Driver mm/memory.c use after free (Nessus ID 236642)

Vuldb Updates
7 months ago
A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is an unknown function of the file mm/memory.c of the component Driver Handler. The manipulation leads to use after free. This vulnerability is traded as CVE-2022-3523. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2020-25654 | Pacemaker up to 1.1.23/2.0.5-rc1 ACL access control (Nessus ID 236643)

Vuldb Updates
7 months ago
A vulnerability classified as critical was found in Pacemaker up to 1.1.23/2.0.5-rc1. This vulnerability affects unknown code of the component ACL Handler. The manipulation leads to improper access controls. This vulnerability was named CVE-2020-25654. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-2196 | Linux Kernel KVM insecure default initialization of resource (Nessus ID 236642)

Vuldb Updates
7 months ago
A vulnerability was found in Linux Kernel. It has been rated as critical. Affected by this issue is some unknown functionality of the component KVM. The manipulation leads to insecure default initialization of resource. This vulnerability is handled as CVE-2022-2196. The attack may be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2021-20179 | Valid pki-core Key authorization (Nessus ID 236644)

Vuldb Updates
7 months ago
A vulnerability, which was classified as critical, was found in Valid pki-core. This affects an unknown part of the component Key Handler. The manipulation leads to incorrect authorization. This vulnerability is uniquely identified as CVE-2021-20179. The attack needs to be approached within the local network. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2019-20330 | Oracle Global Lifecycle Management OPatch up to 11.2.0.3.22/12.2.0.1.18/13.9.4.2.2 Patch Installer deserialization (Nessus ID 236644)

Vuldb Updates
7 months ago
A vulnerability classified as problematic was found in Oracle Global Lifecycle Management OPatch up to 11.2.0.3.22/12.2.0.1.18/13.9.4.2.2. This vulnerability affects unknown code of the component Patch Installer. The manipulation leads to deserialization. This vulnerability was named CVE-2019-20330. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Hanko: Open-source authentication and user management

Help Net Security
7 months ago

Hanko is an open-source, API-first authentication solution purpose-built for the passwordless era. “We focus on helping developers and organizations modernize their authentication flows by migrating users towards passkeys, while still supporting all common authentication methods like email/password, MFA, OAuth, as well as SAML SSO,” Felix Magedanz, CEO at Hanko, told Help Net Security. “What truly sets us apart is our commitment to developer experience,” explained Magedanz. Hanko is fully open source and licensed under AGPL … More →

The post Hanko: Open-source authentication and user management appeared first on Help Net Security.

Mirko Zorz

CVE-2024-28956

CVE Trends
7 months ago
Currently trending CVE - Hype Score: 1 - Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVE-2025-24495

CVE Trends
7 months ago
Currently trending CVE - Hype Score: 32 - Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core™ Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVE-2024-45332

CVE Trends
7 months ago
Currently trending CVE - Hype Score: 1 - Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Managed ad