PT-2023-31198 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalCMS version 5.0.0 Description: A Cross-Site Request Forgery CSRF issue was found in JFinalCMS. The issue is related to the /admin/tag/save API endpoint. This allows for potential unauthorized actions on the system. Recommendations: For...

Important Photon OS Security Update - PHSA-2023-5.0-0158

Updates of 'linux-secure', 'linux-esx', 'linux', 'linux-rt' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-0154

Updates of 'vim', 'linux', 'wireshark', 'linux-secure', 'squid', 'linux-esx', 'linux-rt' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-0152

Updates of 'calico' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2023-5.0-0148

Updates of 'linux', 'linux-secure', 'linux-esx', 'linux-rt', 'openssl' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-0145

Updates of 'gst-plugins-bad' packages of Photon OS have been released...

Security Bulletin: IBM WebSphere Application Server Liberty is vulnerable to a denial of service (CVE-2023-44487)

Summary IBM WebSphere Application Server Liberty is vulnerable to a denial of service with the servlet-3.1, servlet-4.0, servlet-5.0, or servlet-6.0 feature with the HTTP/2 protocol enabled. Vulnerability Details CVEID: CVE-2023-44487 DESCRIPTION: Multiple vendors are vulnerable to a denial of...

PT-2023-28054 · Payara · Payara Micro/Embedded +1

Name of the Vulnerable Software and Affected Versions: Payara Server versions 5.0.0 through 5.56.0 Payara Server versions 4.1.2.191 through 4.1.2.191.45 Payara Server versions 6.0.0 through 6.7.0 Payara Server versions 6.2023.1 through 6.2023.10 Payara Micro and Embedded versions 5.0.0 through...

QNAP QTS OS Command Injection Vulnerability (QSA-23-24)

QNAP QTS is prone to an OS command injection vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts";...

Critical Photon OS Security Update - PHSA-2023-5.0-0140

Updates of 'pgbouncer', 'memcached' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-5.0-0139

Updates of 'python3' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-5.0-0138

Updates of 'librdkafka' packages of Photon OS have been released...

Fedora: Security Advisory for salt (FEDORA-2023-a6699df922)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Rocky Linux 8 : .NET 5.0 (RLSA-2022:0495)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:0495 advisory. - .NET Denial of Service Vulnerability CVE-2022-21986 Note that Nessus has not tested for this issue but has instead relied only on the application's self-report...

Rocky Linux 8 : .NET 5.0 (RLSA-2022:0830)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:0830 advisory. - A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a one-shot decompression...

QNAP QTS SSRF Vulnerability (QSA-23-51)

QNAP QTS is prone to a server-side request forgery SSRF vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts";...

Redmine Security Vulnerabilities

Redmine is a set of open source Web-based project management and defect tracking tools . The product provides features such as project management, issue tracking and role-based access control. A security vulnerability exists in Redmine versions prior to 4.2.11 and 5.0.x prior to 5.0.6, which stem...

PT-2023-9189 · Redmine · Redmine

Name of the Vulnerable Software and Affected Versions: Redmine versions prior to 4.2.11 Redmine versions 5.0.x prior to 5.0.6 Description: The issue is related to a lack of protection for the web page structure in the Thumbnails component of the Redmine web application, allowing for cross-site...

Memory corruption

An SMM memory corruption vulnerability in the SMM driver SMRAM write in CsmInt10HookSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to send arbitrary data to SMM which could lead to privilege escalation...

Design/Logic Flaw

An issue was discovered in IhisiServicesSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There are arbitrary calls to SetVariable with unsanitized arguments in the SMI handler...