Photon OS 4.0: Linux PHSA-2023-4.0-0318

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0318. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2024-4696

A privilege escalation vulnerability was reported in Lenovo Service Bridge prior to version 5.0.2.17 that could allow operating system commands to be executed if a specially crafted link is visited...

CVE-2024-4696

A privilege escalation vulnerability was reported in Lenovo Service Bridge prior to version 5.0.2.17 that could allow operating system commands to be executed if a specially crafted link is visited...

CVE-2024-4696

CVE-2024-4696 affects Lenovo Service Bridge before version 5.0.2.17. The issue is a command-injection/privilege-escalation flaw in the LscShim module: parsing a crafted URL does not properly validate input, allowing arbitrary code execution in the context of the current user after user interactio...

Lenovo Service Bridge Vulnerability - Lenovo Support US

No description provided...

CVE-2023-4696 Improper Access Control in usememos/memos

Improper Access Control in GitHub repository usememos/memos prior to 0.13.2...

CVE-2023-4696

CVE-2023-4696 — Affected: usememos/memos before version 0.13.2. Root cause: improper access control in the GitHub-hosted project. Impact: high/critical confidentiality, integrity, and availability risk per CVSS (NVD 3.1: 9.8; CRITICAL). Exploitation details are not provided in the connected docs....

CVE-2023-4696 Improper Access Control in usememos/memos

Improper Access Control in GitHub repository usememos/memos prior to 0.13.2...

CVE-2023-4696 Improper Access Control in usememos/memos

Improper Access Control in GitHub repository usememos/memos prior to 0.13.2...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 7.6 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Debian dla-3349 : linux-config-5.10 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3349 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3349-1 [email protected]...

Debian: Security Advisory (DLA-3349-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3349-1] linux-5.10 security update

Debian LTS Advisory DLA-3349-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings March 02, 2023 https://wiki.debian.org/LTS Package : linux-5.10 Version : 5.10.162-1deb10u1 CVE ID : CVE-2022-2873 CVE-2022-3545 CVE-2022-3623 CVE-2022-4696 CVE-2022-36280 CVE-2022-41218...

SUSE CVE-2015-4696

Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service crash via a crafted WMF file to the 1 wmf2gd or 2 wmf2eps command...

CVE-2022-4696

creationtimestamp| type| source ---|---|--- 2023-01-11 16:29:24+00:00| seen| https://t.me/cibsecurity/56340...

CVE-2022-4696

CVE-2022-4696 is a use-after-free in the Linux kernel’s io_uring subsystem (IORING_OP_SPLICE). If IO_WQ_WORK_FILES is missing, a path including current->nsproxy can lead to reference counter mismanagement and a UAF. Affected component: io_uring/splice paths in kernel 5.10.x. Impact is local: p...

Ubuntu: Security Advisory (USN-4696-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS : HTMLDOC vulnerability (USN-4696-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4696-1 advisory. It was discovered that HTMLDOC incorrectly handled certain HTML files. An attacker could possibly use this issue to cause a denial of service. Tenable...

CVE-2020-4696

CVE-2020-4696 affects IBM Cloud Pak for Security (CP4S) version 1.3.0.1. The root cause is that the session is not invalidated after logout, which could allow an authenticated user to obtain sensitive information from the previous session. Affected software: CP4S 1.3.0.1. Impact described in sour...

Security Bulletin: IBM Cloud Pak for Security (CP4S) vulnerable to session handling issue (CVE-2020-4696)

Summary IBM Cloud Pak for Security CP4S does not invalidate session immediately after logout which could allow an authenticated user to obtain sensitive information from the previous session if an attacker secured access to a valid token. This has now been addressed. Vulnerability Details CVEID:...