[SECURITY] Fedora 37 Update: nodejs16-16.20.2-1.fc37

Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...

The vulnerability of the software for developing and optimizing multimedia applications, Intel oneVPL GPU, allows a hacker to trigger a service failure.

The vulnerability of the software for developing and optimizing multimedia applications using Intel oneVPL GPUs is related to improper cleaning or release of resources. Exploiting this vulnerability can allow attackers to cause service failures...

CVE-2023-21231

In getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged application to start a non-exported or permission-protected activity due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

Identity Threat Detection and Response: Rips in Your Identity Fabric

Why SaaS Security Is a Challenge In today's digital landscape, organizations are increasingly relying on Software-as-a-Service SaaS applications to drive their operations. However, this widespread adoption has also opened the doors to new security risks and vulnerabilities. The SaaS security atta...

Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2023-1798)

The version of java-1.8.0-openjdk installed on the remote host is prior to 1.8.0.372.b07-1.76. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1798 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component:...

SUSE: Security Advisory (SUSE-SU-2023:3300-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Outlook Spoofing Vulnerability

Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. Microsoft Outlook has a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks...

The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise, which stems from insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code...

SUSE: Security Advisory (SUSE-SU-2023:3267-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:3266-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:3264-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:3265-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-38333

Zoho ManageEngine Applications Manager through 16530 allows reflected XSS while logged in...

CVE-2023-38333

Zoho ManageEngine Applications Manager through 16530 allows reflected XSS while logged in...

Cross site scripting

Zoho ManageEngine Applications Manager through 16530 allows reflected XSS while logged in...

PT-2023-7071

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Applications Manager versions through 16530 Description The issue is related to the failure to protect the web page structure, allowing a remote attacker to conduct a cross-site scripting attack and execute arbitrary code. Th...

ZOHO ManageEngine Applications Manager 跨站脚本漏洞

ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A cross-site scripting...

CVE-2023-38333

Zoho ManageEngine Applications Manager through 16530 allows reflected XSS while logged in...

CVE-2023-38333: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine Applications Manager through 16530 allows reflected XSS while logged in...

CVE-2023-38333

CVE-2023-38333 affects ManageEngine Applications Manager. The connected ZDI advisory indicates a vulnerability in the SingleSignOn page enabling remote code execution, with exploitation requiring a user to visit a malicious page. The underlying issue is improper validation/escaping, enabling arbi...