PT-2023-36153 · Fwupd · Fwupd

Name of the Vulnerable Software and Affected Versions: fwupd affected versions not specified Description: The issue concerns a problem that has been fixed by rebuilding the package with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that...

SUSE CVE-2022-47630

Trusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot certificates. This affects downstream use of getext and authnvctr. Attackers might be able to trigger dangerous read side effects or obtain sensitive information about microarchitectural state...

SUSE-SU-2023:2000-1 Security update for fwupd

This update of fwupd fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

SUSE-SU-2023:1999-1 Security update for fwupd

This update of fwupd fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

CVE-2023-30417

A cross-site scripting XSS vulnerability in Pear-Admin-Boot up to v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title of a private message...

CVE-2023-30417

A cross-site scripting XSS vulnerability in Pear-Admin-Boot up to v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title of a private message...

Cross site scripting

A cross-site scripting XSS vulnerability in Pear-Admin-Boot up to v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title of a private message...

CVE-2023-30417

A cross-site scripting XSS vulnerability in Pear-Admin-Boot up to v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title of a private message...

Pear Admin Boot 跨站脚本漏洞

Pear Admin Boot is an out-of-the-box Spring rapid development platform for the Pear Admin community in China. A security vulnerability exists in Pear Admin Boot v2.0.2. An attacker can exploit this vulnerability to execute arbitrary web script or HTML by injecting a specially crafted payload...

CVE-2023-30417

A cross-site scripting XSS vulnerability in Pear-Admin-Boot up to v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title of a private message...

PT-2023-36149 · Fwupd · Fwupd

Name of the Vulnerable Software and Affected Versions: fwupd affected versions not specified Description: The issue is related to the secure boot key. The package has been rebuilt with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that contai...

PT-2023-22683 · Unknown · Pear Admin Boot

Name of the Vulnerable Software and Affected Versions: Pear-Admin-Boot versions up to 2.0.2 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title of a private message. This enables attackers to...

PT-2023-36150 · Fwupd · Fwupd

Name of the Vulnerable Software and Affected Versions: fwupd affected versions not specified Description: The issue concerns a problem that is fixed by rebuilding the package with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that contains a...

CVE-2023-30417

Pear-Admin-Boot (v2.0.2 and earlier) is affected by an XSS vulnerability that allows an attacker to inject arbitrary web scripts or HTML via the Title field of a private message. Affected component: Pear-Admin-Boot; root cause: improper sanitization/injection in the Title of private messages; imp...

SUSE: Security Advisory (SUSE-SU-2023:1968-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:1968-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14560: Fixed potential secure boot bypass via an improper check of GetEfiGlobalVariable2 bsc1174246. - CVE-2021-38578: Fixed underflow in MdeModulePkg/PiSmmCore SmmEntryPointAdd bsc1196741...

SUSE-SU-2023:1961-1 Security update for s390-tools

This update of s390-tools fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

SUSE-SU-2023:1958-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14560: Fixed potential secure boot bypass via an improper check of GetEfiGlobalVariable2 bsc1174246. - CVE-2021-38578: Fixed underflow in MdeModulePkg/PiSmmCore SmmEntryPointAdd bsc1196741...

SUSE: Security Advisory (SUSE-SU-2023:1941-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-9792 · Visteon · Visteon Infotainment App Soc

Name of the Vulnerable Software and Affected Versions: Visteon Infotainment App SoC affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of Visteon Infotainment systems. Although authentication is required to exploit this...