Baseline Controls Access controls, audit logging Data sanitization & DLP for AI pipelines Shadow AI monitoring
Read more π https://lttr.ai/AuJxc
#Security #Infosec #Ai

Baseline Controls Access controls, audit logging Data sanitization & DLP for AI pipelines Shadow AI monitoring
Read more π https://lttr.ai/AuJxc
#Security #Infosec #Ai
π¨ EUVD-2023-36491 π 7.8/10 π In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operatio... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36491 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2023-36854 π 5.5/10 π A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of s... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36854 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2023-36879 π 4.7/10 π’ glib π A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to res... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36879 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2023-36886 π 5.3/10 π A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affe... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36886 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2023-36908 π 5.5/10 π A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to ... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36908 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2023-38400 π 7.8/10 π The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one pi... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-38400 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2023-39008 π 6.5/10 π D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DB... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-39008 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2026-101799 π 5.3/10 π’ sgl-project π A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.create_req of the file... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101799 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2023-39039 π 7.8/10 π’ Linux π Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-39039 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2023-39822 π n/a π An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c. π https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-39822 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2023-39929 π 7.5/10 π’ envoyproxy π Envoy is a cloud-native high-performance edge/middle/service proxy. Envoyβs HTTP/2 codec may leak a header map and bookkeeping structures upon receivin... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-39929 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2023-40604 π n/a π The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption. π https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-40604 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2023-41353 π 4.6/10 π An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c. π https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-41353 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2023-42225 π 9.8/10 π The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-42225 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2023-42344 π 8.8/10 π’ curl π This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-42344 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2023-42345 π n/a π’ curl π This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met. libcurl performs tra... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-42345 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2023-42874 π n/a π GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode at /gdb/ada-lang.c. π https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-42874 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2023-42924 π 5.1/10 π’ Red Hat π A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num fiel... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-42924 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2023-42927 π 6.7/10 π’ Red Hat π A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw allows a... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-42927 #cybersecurity #infosec #cve #euvd