Important: Red Hat Security Advisory: Red Hat build of Cryostat security update

An update is now available for the Red Hat build of Cryostat 2 on RHEL 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

CVE-2024-0530

A vulnerability was found in CXBSoft Post-Office up to 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /apps/reggo.php of the component HTTP POST Request Handler. The manipulation of the argument usernamereg leads to sql injection. The exploit has...

CVE-2024-0530

CXBSoft Post-Office ≤1.0 is affected by a SQL injection in the HTTP POST Request Handler (/apps/reg_go.php) via the username_reg parameter. Exploit disclosed publicly; vulnerability details consistently reported across multiple sources. No patch/version fix details provided in the documents. Prac...

CVE-2024-0530 CXBSoft Post-Office HTTP POST Request reg_go.php sql injection

A vulnerability was found in CXBSoft Post-Office up to 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /apps/reggo.php of the component HTTP POST Request Handler. The manipulation of the argument usernamereg leads to sql injection. The exploit has...

CVE-2024-0530 CXBSoft Post-Office HTTP POST Request reg_go.php sql injection

A vulnerability was found in CXBSoft Post-Office up to 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /apps/reggo.php of the component HTTP POST Request Handler. The manipulation of the argument usernamereg leads to sql injection. The exploit has...

Huawei EulerOS: Security Advisory for unzip (EulerOS-SA-2023-1719)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.0 : unzip (EulerOS-SA-2023-1719)

According to the versions of the unzip package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap o...

Amazon Linux 2023 : unzip (ALAS2023-2023-029)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-029 advisory. A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially...

CentOS: Security Advisory for libksba (CESA-2023:0530)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS 7 : libksba (RHSA-2023:0530)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0530 advisory. - Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser. CVE-2022-47629 Note that Nessus has not tested for this issue...

Important Photon OS Security Update - PHSA-2023-3.0-0530

Updates of 'nxtgn-openssl' packages of Photon OS have been released...

Huawei EulerOS: Security Advisory for unzip (EulerOS-SA-2023-1300)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scientific Linux Security Update : libksba on SL7.x i686/x86_64 (2023:0530)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2023:0530-1 advisory. - libksba: integer overflow to code executiona CVE-2022-47629 Note that Nessus has not tested for this issue but has instead relied only on the...

EulerOS Virtualization 3.0.2.2 : unzip (EulerOS-SA-2023-1300)

According to the versions of the unzip package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap o...

CVE-2023-0530

SourceCodester Online Tours & Travels Management System 1.0 contains a SQL injection in admin/approve_user.php via the id parameter. This can be exploited remotely; exploitation has been disclosed publicly. Affected component is the file that handles user approval, with impact described as high c...

Amazon Linux 2 : unzip (ALAS-2023-1906)

The version of unzip installed on the remote host is prior to 6.0-57. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1906 advisory. A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null...

Low: unzip

Issue Overview: A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution. CVE-2021-4217 A flaw was found i...

Important Photon OS Security Update - PHSA-2022-0530

Updates of 'device-mapper-multipath' packages of Photon OS have been released...

Updated unzip packages fix security vulnerability

Improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution. CVE-2021-4217 Conversion of a wide string to a local string that leads to a heap of out-of-bound write. Thi...

Ubuntu: Security Advisory (USN-5673-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...