CVE-2023-1623 Custom Post Type UI < 1.13.5 - Debug Info Sending via CSRF

The Custom Post Type UI WordPress plugin before 1.13.5 does not properly check for CSRF when sending the debug information to a user supplied email, which could allow attackers to make a logged in admin send such information to an arbitrary email address via a CSRF attack...

CVE-2023-1623

CVE-2023-1623 affects the WordPress plugin Custom Post Type UI prior to 1.13.5. The issue is a CSRF in the debug information sending flow to a user-supplied email, enabling a logged-in admin to cause that information to be sent to an arbitrary address. Impact is primarily on confidentiality (expo...

CBL Mariner 2.0 Security Update: libtiff (CVE-2022-1623)

The version of libtiff installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1623 advisory. - LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tiflzw.c:624, allowing attackers to...

K15902: Apache vulnerability CVE-2010-1623

Security Advisory Description Memory leak in the aprbrigadesplitline function in buckets/aprbrigade.c in the Apache Portable Runtime Utility library aka APR-util before 1.3.10, as used in the modreqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a...

SUSE CVE-2022-1623

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tiflzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa...

[SECURITY] [DSA 5333-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5333-1 [email protected] https://www.debian.org/security/ Aron Xu January 29, 2023 https://www.debian.org/security/faq -...

Amazon Linux AMI : git (ALAS-2022-1623)

The version of git installed on the remote host is prior to 2.37.1-1.76. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1623 advisory. A vulnerability was found in Git. This flaw occurs due to Git not checking the ownership of directories in a local multi-user system...

OESA-2022-1728 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

Mageia: Security Advisory (MGASA-2022-0240)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-1623 affecting package libtiff for versions less than 4.4.0-1

CVE-2022-1623 affecting package libtiff for versions less than 4.4.0-1. An upgraded version of the package is available that resolves this issue...

MGASA-2022-0240 Updated libtiff packages fix security vulnerability

Heap-buffer-overflow in TIFFReadRawDataStriped in tiffinfo.c. CVE-2022-1354 Stack-buffer-overflow in tiffcp.c in main. CVE-2022-1355 Out-of-bounds read in LZWDecode. CVE-2022-1622, CVE-2022-1623...

BELL-CVE-2022-1623 CVE-2022-1623 does not affect BellSoft software

Bulletin has no description...

CVE-2022-1623

CVE-2022-1623 affects LibTIFF. The master branch contains an out-of-bounds read in LZWDecode() in libtiff/tif_lzw.c:624, enabling denial-of-service via a crafted TIFF file. For users building from source, a fix is available via commit b4e79bfa0c7d2d08f6f1e7ec38143fc8cb11394a . Connected advisorie...

CVE-2021-1623

creationtimestamp| type| source ---|---|--- 2021-09-23 07:29:45+00:00| seen| https://t.me/cibsecurity/29272...

SUSE: Security Advisory (SUSE-SU-2021:1623-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:1623-1)

The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-36312: Fixed an issue in virt/kvm/kvmmain.c that had a kvmiobusunregisterdev memory leak upon a kmalloc failure bnc1184509. CVE-2021-29650: Fixed an...

CentOS 8 : thunderbird (CESA-2019:1623)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:1623 advisory. - libical: Heap buffer over read in icalparser.c parsergetnextchar CVE-2019-11703 - libical: Heap buffer overflow in icalmemorystrdupanddequote functio...

CVE-2020-1623

A local, authenticated user with shell can view sensitive configuration information via the ev.ops configuration file. This issue affects all versions of Junos OS Evolved prior to 19.2R1...

CVE-2020-1623

CVE-2020-1623 affects Junos OS Evolved prior to 19.2R1. A local, authenticated user can view sensitive information from the ev.ops configuration file, leaking data with partial confidentiality impact (per CVSS v2) and high confidentiality impact (per CVSS v3.1). Exploitation details are not provi...

CVE-2020-1623 Junos OS Evolved: ev.ops file may leak sensitive information

A local, authenticated user with shell can view sensitive configuration information via the ev.ops configuration file. This issue affects all versions of Junos OS Evolved prior to 19.2R1...