Moodle Multiple Vulnerabilities (MSA-23-0017, MSA-23-0018)

Moodle is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; ifdescription...

Critical Photon OS Security Update - PHSA-2023-4.0-0415

Updates of 'syslinux', 'calico', 'shadow', 'nodejs', 'pmd-ng' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-4.0-0414

Updates of 'openjdk11', 'crash' packages of Photon OS have been released...

MAL-2023-1191 Malicious code in grabathon-4.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63f79f14ebf843fdb684a6c8fb1c92c4bd5f60701a7fc98c0b95584b249a8438 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE: Security Advisory (SUSE-SU-2023:2504-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important Photon OS Security Update - PHSA-2023-4.0-0408

Updates of 'sysstat', 'open-vm-tools' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-4.0-0406

Updates of 'linux-aws', 'linux-secure', 'openssl', 'linux-rt' packages of Photon OS have been released...

Security Bulletin: Vulnerabilities found in GSKit may affect IBM Content Collector for SAP Applications

Summary IBM Content Collector for SAP Applications may be affected by vulnerabilities found in GSKit Vulnerability Details CVEID:CVE-2023-32342 DESCRIPTION: IBM GSKit could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption...

Important Photon OS Security Update - PHSA-2023-4.0-0404

Updates of 'cassandra', 'wireshark' packages of Photon OS have been released...

CVE-2023-33671

Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function...

CVE-2023-33672

Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function...

CVE-2023-33670

Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sub4a79ec function...

Important Photon OS Security Update - PHSA-2023-4.0-0400

Updates of 'libcap', 'cups' packages of Photon OS have been released...

Wireshark 缓冲区错误漏洞

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in Wireshark that stems from an IEEE C37.118 Synchronized Phase...

Design/Logic Flaw

Download Center fails to properly validate the file path submitted by a user, An attacker can exploit this vulnerability to gain unauthorized access to sensitive files or directories without appropriate permission restrictions. Download Center on ADM 4.0 and above will be affected. Affected...

CVE-2023-2749 A Gain Information vulnerability was found on Download Center.

Download Center fails to properly validate the file path submitted by a user, An attacker can exploit this vulnerability to gain unauthorized access to sensitive files or directories without appropriate permission restrictions. Download Center on ADM 4.0 and above will be affected. Affected...

CVE-2023-2749 A Gain Information vulnerability was found on Download Center.

Download Center fails to properly validate the file path submitted by a user, An attacker can exploit this vulnerability to gain unauthorized access to sensitive files or directories without appropriate permission restrictions. Download Center on ADM 4.0 and above will be affected. Affected...

CVE-2023-2749

CVE-2023-2749 affects ASUSTOR ADM 4.0+ Download Center, where improper validation of the user-submitted file path could allow an attacker to access sensitive files or directories without proper permissions. Affected versions include Download Center 1.1.5.r1280 and below. The public sources descri...

SUSE: Security Advisory (SUSE-SU-2023:2331-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:2327-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...