gdk-pixbuf2 security update

2.42.6-3 - Backport fixes for CVE-2021-46829 and CVE-2021-44648 - Resolves: rhbz2115213 - Resolves: rhbz2044346...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : Nova vulnerability (USN-6073-3)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6073-3 advisory. Jan Wasilewski and Gorka Eguileor discovered that Nova incorrectly handled deleted volume attachments. An authenticated user or attacker could...

Python <= 2.7.18, 3.x <= 3.12.3 Security Bypass Vulnerability - Mac OS X

Python is prone to a security bypass vulnerability in the e-mail module. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Ubuntu: Security Advisory (USN-6073-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-23854 · Trend Micro · Trend Micro Mobile Security

Name of the Vulnerable Software and Affected Versions: Trend Micro Mobile Security Enterprise version 9.8 SP5 Trend Micro Mobile Security Enterprise versions 9.8 SP5 through versions prior to the application of Critical Patch 3 Description: The issue allows a remote user to bypass authentication,...

PT-2023-23097 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge SE2023 versions prior to V223.0 Update 3 Description: A vulnerability has been identified that could allow an attacker to disclose sensitive information due to an out of bounds read past the end of an allocated buffer while parsing...

K000133759: Python vulnerability CVE-2020-26116

Security Advisory Description http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of...

[SECURITY] Fedora 38 Update: rust-afterburn-5.4.0-3.fc38

Simple cloud provider agent...

[SECURITY] Fedora 36 Update: webkit2gtk3-2.40.1-1.fc36

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

id-3.net Cross Site Scripting vulnerability OBB-3292561

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Upgraded Q -> 3 from #853 [1683219256548]

Judge has assessed an item in Issue 853 as 3 risk. The relevant finding follows: LC-02 USE THE SAFECAST LIBRARY FOR CASTING VALUES TO AVOID OVERFLOW/UNDERFLOW File: virtualBaseTokenReserves += uint128netInputAmount - feeAmount - protocolFeeAmount; virtualNftReserves -= uint128weightSum; --- The...

Upgraded Q -> 3 from #903 [1683219188466]

Judge has assessed an item in Issue 903 as 3 risk. The relevant finding follows: L-2. Use SafeCast Library Description Downcasting from uint256/int256 in Solidity does not revert on overflow. This can easily result in undesired exploitation or bugs, since developers usually assume that overflows...

CVE-2018-25032 affecting package boost 1.66.0-3

CVE-2018-25032 affecting package boost 1.66.0-3. A patched version of the package is available...

CVE-2023-24607 affecting package qt5-qtbase 5.12.11-3

CVE-2023-24607 affecting package qt5-qtbase 5.12.11-3. A patched version of the package is available...

krautli.pt Cross Site Scripting vulnerability OBB-3290917

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-1385

creationtimestamp| type| source ---|---|--- 2023-05-03 16:31:08+00:00| seen| https://t.me/cibsecurity/63229 2023-06-27 08:55:40+00:00| seen| https://t.me/androidMalware/1874...

CVE-2018-25032 affecting package boost for versions less than 1.76.0-3

CVE-2018-25032 affecting package boost for versions less than 1.76.0-3. A patched version of the package is available...

CVE-2023-29839

creationtimestamp| type| source ---|---|--- 2023-05-03 07:30:44+00:00| seen| https://t.me/cibsecurity/63195 2026-07-29 12:00:34+00:00| seen| https://t.me/CVEhub/12085 2026-07-30 00:00:59+00:00| seen| https://t.me/CVEhub/12085 2026-07-31 01:00:03+00:00| published-proof-of-concept|...

onlinetours.es Cross Site Scripting vulnerability OBB-3289450

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bostonducktours.com Cross Site Scripting vulnerability OBB-3289418

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...