CVE-2020-22628

A flaw was found in the libraw library. This issue occurs due to an out-of-bounds read vulnerability that exists within the "LibRaw::stretch" function libraw\src\postprocessing\aspectratio.cpp when parsing a crafted CRW file. Mitigation Mitigation for this issue is either not available or the...

Security Bulletin: IBM Java SDK and IBM Java Runtime for IBM i are vulnerable to arbitrary code execution due to an unsafe deserialization flaw (CVE-2022-40609).

Summary IBM® SDK Java™ Technology Edition and IBM® Runtime Environment Java™ used by IBM i are vulnerable to an attacker executing arbitrary code due to an unsafe deserialization flaw as described in the vulnerability details section. The vulnerability is fixed by applying an IBM i Group PTF for...

Malicious code in eslint-config-web3-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e23c591b583354dc45114b2ff42008dd281f6a57772a8f5f59a249ab89f2fd84 The OpenSSF Package Analysis project identified 'eslint-config-web3-base' @ 0.1.2 npm as malicious. It is considered malicious because: - The...

MAL-2023-7905 Malicious code in eslint-config-web3-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e23c591b583354dc45114b2ff42008dd281f6a57772a8f5f59a249ab89f2fd84 The OpenSSF Package Analysis project identified 'eslint-config-web3-base' @ 0.1.2 npm as malicious. It is considered malicious because: - The...

SUSE SLED12: gstreamer-plugins-base / gstreamer-plugins-base-devel / etc (SUSE-SU-2023:3402-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3402-1 advisory. - The patch for CVE-2023-37328 is removed because it was added by mistake and the package has never been affected by th...

SUSE: Security Advisory (SUSE-SU-2023:3402-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:3402-1 Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following issues: - The patch for CVE-2023-37328 is removed because it was added by mistake and the package has never been affected by this vulnerability. bsc1213131...

SUSE SLED15: libQt6Concurrent6 / libQt6Core6 / libQt6DBus6 / libQt6Gui6 / etc (SUSE-SU-2023:3380-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3380-1 advisory. - CVE-2023-34410: Fixed certificate validation flaw bsc1211994. - CVE-2023-33285: Fixed buffer...

Security Bulletin: IBM Informix JDBC Driver Is Vulnerable to Remote Code Execution (CVE-2023-27866)

Summary IBM Informix JDBC Driver is susceptible to remote code execution attack. This vulnerability is addressed. Vulnerability Details CVEID:CVE-2023-27866 DESCRIPTION: IBM Informix JDBC Driver is susceptible to remote code execution attack via JNDI injection when driver code or the application...

[SECURITY] Fedora 38 Update: qt5-qtbase-5.15.10-5.fc38

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...

Security Bulletin: Vulnerability in IBM JDK (CVE-2022-40609 ) affects Power HMC

Summary IBM SDK, Java Technology is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2022-40609 DESCRIPTION: IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the...

www/varnish-libvmod-digest -- base64 decoding vulnerability

varnish developers report: Common usage of vmod-digest is for basic HTTP authentication, in which case it may be possible for an attacker to circumvent the authentication check. If the decoded result string is somehow being made visible to the attacker for example the result of the decoding is...

What's New in CVSS v4

The pending update to the Common Common Vulnerability Scoring System CVSS, version 4.0, has garnered a noticeable volume of articles, blog posts and watercooler now known as Slack and Zoom air time. Reaction from the community has been positive, with general sentiment pinned somewhere near...

The vulnerability of the Base Internals component in the Google Chrome browser allows a hacker to read and write arbitrary files.

The vulnerability of Google Chrome’s Base Internals component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to read and write arbitrary files using a specially crafted HTML page...

Daylight Studio Fuel CMS SQL Injection Vulnerability

Daylight Studio Fuel CMS is a content management system based on CodeIgniter. A security vulnerability exists in Daylight Studio Fuel CMS version 1.4.9, which stems from an SQL injection vulnerability in the file Basemodulemodel.php that allows remote attackers to execute arbitrary code via the c...

SUSE SLES15: gstreamer-plugins-base / gstreamer-plugins-base-devel / etc (SUSE-SU-2023:3265-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3265-1 advisory. - CVE-2023-37327: Fixed GStreamer FLAC File Parsing Integer Overflow bsc1213128. - CVE-2023-37328: Fixed Heap-based...

SUSE: Security Advisory (SUSE-SU-2023:3265-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-24950

SQL Injection vulnerability in file Basemodulemodel.php in Daylight Studio FUEL-CMS version 1.4.9, allows remote attackers to execute arbitrary code via the col parameter to function listitems...

USN-6277-2 php-dompdf vulnerabilities

USN-6277-1 fixed vulnerabilities in Dompdf. This update provides the corresponding updates for Ubuntu 22.04 LTS. Original advisory details: It was discovered that Dompdf was not properly validating untrusted input when processing HTML content under certain circumstances. An attacker could possibl...

PT-2023-5309 · Salt +3 · Salt +3

Name of the Vulnerable Software and Affected Versions: Salt masters versions prior to 3005.2 or 3006.2 Description: The issue is related to Git Providers in Salt masters, where they can read from the wrong environment due to the same cache directory base name. This can lead to garbage data or the...