CVE-2023-24932

Secure Boot Security Feature Bypass Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

ALSA-2023:2487 Moderate: fwupd security and bug fix update

The fwupd packages provide a service that allows session software to update device firmware. Security Fixes: fwupd: world readable password in /etc/fwupd/redfish.conf CVE-2022-3287 shim: 3rd party shim allow secure boot bypass CVE-2022-34301 shim: 3rd party shim allow secure boot bypass...

MSI Data Breach: Private Code Signing Keys Leaked on the Dark Web

The threat actors behind the ransomware attack on Taiwanese PC maker MSI last month have leaked the company's private code signing keys on their dark website. "Confirmed, Intel OEM private key leaked, causing an impact on the entire ecosystem," Alex Matrosov, founder and CEO of firmware security...

MSI Data Breach: Private Code Signing Keys Leaked on the Dark Web

The threat actors behind the ransomware attack on Taiwanese PC maker MSI last month have leaked the company's private code signing keys on their dark website. "Confirmed, Intel OEM private key leaked, causing an impact on the entire ecosystem," Alex Matrosov, founder and CEO of firmware security...

Important: Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 3.20.1 security update

Red Hat Integration Camel for Spring Boot 3.20.1 release and security update is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 3.18.3 Patch 1 security update

A patch is now available for Camel for Spring Boot 3.18.3. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having an impact of Important. A Common Vulnerability Scoring System CVSS base score,...

Malicious code in spring-boot-admin-virgil-custom-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf3bf8c73b2a5a04555aa1692341d9861a37ad32f428b123c88751322e74c66d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1337 Malicious code in virgil-spring-boot-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d7b81762635da58744d7567d3ac4b1bf12da5d3c72070a9d2260d40463fcdbb The OpenSSF Package Analysis project identified 'virgil-spring-boot-starter' @ 20.0.0 npm as malicious. It is considered malicious because: - Th...

SUSE-SU-2023:2084-1 Security update for shim

This update for shim fixes the following issues: - CVE-2022-28737 was missing as reference previously. - Upgrade shim-install for bsc1210382 After closing Leap-gap project since Leap 15.3, openSUSE Leap direct uses shim from SLE. So the castring is 'SUSE Linux Enterprise Secure Boot CA1', not...

SUSE-SU-2023:2083-1 Security update for installation-images

This update of installation-images fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

SUSE-SU-2023:2082-1 Security update for installation-images

This update of installation-images fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

PT-2023-36155 · Unknown · Installation-Images

Name of the Vulnerable Software and Affected Versions: installation-images affected versions not specified Description: The issue concerns a rebuild of the package with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that contains a fix for thi...

Authentication Bypass

Linux kernel is vulnerable to Authentication Bypass. The vulnerability exists because the library does not properly enforce policy in certain conditions, which allows an attacker to bypass the Kernel lockdown restrictions when UEFI secure boot is disabled or unavailable and IMA appraisal is enabl...

forum-java 跨站脚本漏洞

forum-java is a Chinese Qbian individual developers with Java spring boot implementation of a modern community forum / Q&A / BBS / social network / blog system platform. A security vulnerability exists in Qbian61 forum-java, which stems from a cross-site scripting XSS vulnerability that allows an...

my-site 跨站脚本漏洞

my-site is WinterChenS personal developer's springboot2.0 based development of personal Web site , integrated : personal home page , personal blog , personal works . WinterChenS my-site has a security vulnerability that stems from the presence of a cross-site scripting XSS vulnerability that allo...

My-Blog 跨站脚本漏洞

My-Blog is a Java blog system implemented by SpringBoot + Mybatis + Thymeleaf and other technologies, with beautiful pages, full functionality, easy deployment and perfect code. ZHENFENG13 A security vulnerability exists in My-Blog, which stems from the presence of a cross-site scripting XSS...

SUSE: Security Advisory (SUSE-SU-2023:1961-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Access Restriction Bypass

org.springframework.boot:spring-boot-actuator-autoconfigure is vulnerable to Access Restriction Bypass. The vulnerability is due to improper wild card matching, which allows a remote attacker to bypass access restrictions and gain access to the system. Please note that the vulnerability is only...

SUSE-SU-2023:2050-1 Security update for fwupd

This update of fwupd fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

EulerOS Virtualization 2.9.1 : grub2 (EulerOS-SA-2023-1636)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A buffer overflow was found in grubfontconstructglyph. A malicious crafted pf2 font can lead to an overflow when calculating the...