Aggregator
评论 | 治理AI偷声,监管需“调大音量”
2 weeks 4 days ago
随着技术门槛降低,从AI“换声”到“偷声”,侵权问题正变得越来越复杂。现在,普通人仅用少量的样本数据,比如文本、音频,就能借助简便易用的深度合成技术,模糊真实信息和虚假信息的边界。
专家解读 | 黄璜:深化整治“指尖上的形式主义”应坚持四个相结合
2 weeks 4 days ago
近日,中央网信办印发《“指尖上的形式主义”全国整治工作方案》,为更好地贯彻落实该方案,确保数字化手段有效服务基层治理提质增效,各级政务部门在具体实践中应坚持四个相结合。
关注 | 中央网信办部署开展“清朗·同城版块信息内容问题整治”专项行动
2 weeks 4 days ago
为集中治理同城版块易发多发问题,压紧压实网站平台主体责任,切实净化同城版块网络生态环境,近日,中央网信办印发通知,在全国范围内部署开展为期2个月的“清朗·同城版块信息内容问题整治”专项行动。
关注 | 13项网络安全国家标准明日起实施
2 weeks 4 days ago
11月1日起,《网络安全技术 信息技术安全评估准则》等13项网络安全国家标准开始实施,将为引领网络安全产业高质量发展,增强广大人民群众的获得感、幸福感和安全感提供标准支撑。
权威解答+图解 | 《工业和信息化领域数据安全事件应急预案(试行)》
2 weeks 4 days ago
近日,工业和信息化部印发《工业和信息化领域数据安全事件应急预案(试行)》(工信部网安〔2024〕214号)。
定了!工信领域特重大、重大、一般数据安全事件这么分
2 weeks 4 days ago
据工信部网站10月31日消息,工信部印发《工业和信息化领域数据安全事件应急预案(试行)》。
“电话10分钟、书面30分钟”,工信领域重大数据安全事件须立即上报!
2 weeks 4 days ago
据工信部网站10月31日消息,工信部印发《工业和信息化领域数据安全事件应急预案(试行)》。
招聘启事 | 中国信息安全测评中心招聘安全测评人员
2 weeks 4 days ago
中国信息安全测评中心是我国专门从事信息技术安全测试和风险评估的权威职能机构,现面向社会招录10名非编产品安全测评人员。
CVE-2024-26889 | Linux Kernel up to 6.8.1 hci_core buffer overflow
2 weeks 4 days ago
A vulnerability classified as critical has been found in Linux Kernel up to 6.8.1. Affected is an unknown function of the component hci_core. The manipulation leads to buffer overflow.
This vulnerability is traded as CVE-2024-26889. Access to the local network is required for this attack to succeed. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2023-38299 | AT&T/Nokia Devices information disclosure
2 weeks 4 days ago
A vulnerability was found in AT&T/Nokia Devices. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to information disclosure.
This vulnerability was named CVE-2023-38299. Attacking locally is a requirement. There is no exploit available.
vuldb.com
CVE-2024-26977 | Linux Kernel up to 5.15.153/6.1.83/6.6.23/6.7.11/6.8.2 pci_iounmap memory leak
2 weeks 4 days ago
A vulnerability was found in Linux Kernel up to 5.15.153/6.1.83/6.6.23/6.7.11/6.8.2 and classified as problematic. This issue affects the function pci_iounmap. The manipulation leads to memory leak.
The identification of this vulnerability is CVE-2024-26977. The attack needs to be done within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-34401 | Savsoft Savsoft Quiz 6.0 insert_quiz quiz_name cross site scripting (Exploit 51988 / EDB-51988)
2 weeks 4 days ago
A vulnerability, which was classified as problematic, has been found in Savsoft Savsoft Quiz 6.0. Affected by this issue is some unknown functionality of the file index.php/quiz/insert_quiz/. The manipulation of the argument quiz_name leads to cross site scripting.
This vulnerability is handled as CVE-2024-34401. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2023-24204 | SourceCodester Simple Customer Relationship Management System 1.0 get-quote.php name sql injection
2 weeks 4 days ago
A vulnerability has been found in SourceCodester Simple Customer Relationship Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file get-quote.php. The manipulation of the argument name leads to sql injection.
This vulnerability was named CVE-2023-24204. The attack can be initiated remotely. There is no exploit available.
vuldb.com
CVE-2021-47228 | Linux Kernel up to 5.10.45/5.12.12 ioremap ExitBootServices denial of service (208bb686e7fa/b7a05aba39f7/8d651ee9c71b)
2 weeks 4 days ago
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 5.10.45/5.12.12. Affected by this issue is the function ExitBootServices of the component ioremap. The manipulation leads to denial of service.
This vulnerability is handled as CVE-2021-47228. Access to the local network is required for this attack to succeed. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2021-47333 | Linux Kernel up to 5.4.133/5.10.51/5.12.18/5.13.3 on/off alcor_pci_aspm_ctrl null pointer dereference
2 weeks 4 days ago
A vulnerability was found in Linux Kernel up to 5.4.133/5.10.51/5.12.18/5.13.3. It has been classified as problematic. Affected is the function alcor_pci_aspm_ctrl of the file on/off. The manipulation leads to null pointer dereference.
This vulnerability is traded as CVE-2021-47333. The attack can only be done within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2023-52776 | Linux Kernel up to 6.5.12/6.6.2 ath12k_mac_get_ar_by_pdev_id use after free (774de37c147f/d7a5f7f76568/69bd216e0493)
2 weeks 4 days ago
A vulnerability classified as problematic has been found in Linux Kernel up to 6.5.12/6.6.2. This affects the function ath12k_mac_get_ar_by_pdev_id. The manipulation leads to use after free.
This vulnerability is uniquely identified as CVE-2023-52776. The attack can only be done within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-27072 | Linux Kernel up to 6.8.1 Media usbtv_video_free deadlock (3e7d82ebb86e/65e6a2773d65)
2 weeks 4 days ago
A vulnerability was found in Linux Kernel up to 6.8.1. It has been declared as critical. Affected by this vulnerability is the function usbtv_video_free of the component Media. The manipulation leads to deadlock.
This vulnerability is known as CVE-2024-27072. Access to the local network is required for this attack to succeed. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2023-52811 | Linux Kernel up to 5.15.139/6.1.63/6.5.12/6.6.2 scsi ibmvfc_get_event null pointer dereference (Nessus ID 207689)
2 weeks 4 days ago
A vulnerability has been found in Linux Kernel up to 5.15.139/6.1.63/6.5.12/6.6.2 and classified as critical. This vulnerability affects the function ibmvfc_get_event of the component scsi. The manipulation leads to null pointer dereference.
This vulnerability was named CVE-2023-52811. The attack can only be initiated within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-35877 | Linux Kernel up to 6.8.4 VM_PAT Handling follow_phys data authenticity (Nessus ID 207773)
2 weeks 4 days ago
A vulnerability classified as problematic has been found in Linux Kernel up to 6.8.4. This affects the function follow_phys of the component VM_PAT Handling. The manipulation leads to insufficient verification of data authenticity.
This vulnerability is uniquely identified as CVE-2024-35877. The attack can only be initiated within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com