8604 matches found
MAL-2023-8008 Malicious code in @rocketrefer/components (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0c06dd93e949e2750017a45685b6d200640e259c416cb4cbc995550ea3e04ab0 Malicious packages campaign since 2021 targeting developers, steals source code and secrets...
Security Bulletin: IBM Cognos Analytics is affected but not classified as vulnerable to multiple vulnerabilities
Summary IBM Cognos Analytics is affected but not classified as vulnerable to vulnerabilities, based on current information, in the following 3rd-party components: Stanford coreNLP, FasterXML jackson-databind, SnakeYAML, Dromera Hutool, jsoup, Node.js vm2 and Node.js http-cache-semantics. These...
The vulnerability of Zoom’s video conferencing software lies in the improper verification of cryptographic signatures, which allows attackers to downgrade the versions of Zoom components to earlier versions.
The vulnerability of Zoom’s video conferencing software is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow an attacker to downgrade the versions of Zoom components to earlier versions...
Medium: icu
Issue Overview: International Components for Unicode ICU-20850 v66.1 was discovered to contain a use after free bug in the pkgcreateWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp. CVE-2020-21913 Affected Packages: icu Note: This advisory is applicable to Amazon Linux 2 AL2 Core...
Medium: libicu60
Issue Overview: International Components for Unicode ICU-20850 v66.1 was discovered to contain a use after free bug in the pkgcreateWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp. CVE-2020-21913 Affected Packages: libicu60 Note: This advisory is applicable to Amazon Linux 2 AL2...
The vulnerabilities of the APIkit components, the HTTP connector, and the OAuth2 Provider integrated into the API Gateway environment of the Mule Runtime, allow attackers to gain unauthorized access to protected information.
The vulnerabilities of the APIkit components, the HTTP connector, and the OAuth2 Provider integrated into the API Gateway environment of Mule Runtime Mule are related to errors in processing the relative path to the restricted directory. Exploiting these vulnerabilities can allow an attacker to...
PT-2023-5289 · Apple +6 · Apple Macos +6
Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.5 WebKitGTK affected versions not specified WPE WebKit affected versions not specified Description: The issue is related to errors in handling input data during code syntax analysis, which may allow a remote...
Global CDN Service ‘jsdelivr’ Exposed Users to Phishing Attacks
By Habiba Rashid In the interconnected world of web development, open-source components play a vital role, facilitating collaboration and code sharing… This is a post from HackRead.com Read the original post: Global CDN Service jsdelivr Exposed Users to Phishing Attacks...
Cisco BroadWorks 安全漏洞
Cisco BroadWorks is a carrier-grade unified communications software platform from Cisco. It is used to deploy cloud calls from public network platforms on any type of wired or wireless network architecture. A security vulnerability exists in Cisco BroadWorks that stems from a flaw in the privileg...
Oracle Solaris Critical Patch Update : jul2023_SRU11_4_59_144_2
This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the MySQL Enterprise Monitor product of Oracle MySQL component: Monitoring: General Apache Tomcat. Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability...
RHEL 9 : kernel-rt (RHSA-2023:4138)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4138 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...
Oracle Critical Patch Update Advisory - July 2023
A Critical Patch Update is a collection of patches for multiple security vulnerabilities. These patches address vulnerabilities in Oracle code and in third party components included in Oracle products. These patches are usually cumulative, but each advisory describes only the security patches add...
CVE-2023-29456
URL validation scheme receives input from a user and then parses it to identify its various components. The validation scheme can ensure that all URL components comply with internet standards...
Decidim vulnerable to sensitive data disclosure
Note: added the actual report as a comment. Summary Decidim, a platform for digital citizen participation, uses a third-party library named Ransack for filtering certain database collections e.g., public meetings. By default, this library allows filtering on all data attributes and associations...
CVE-2023-35326
Windows CDP User Components Information Disclosure Vulnerability...
CVE-2023-35326
Windows CDP User Components Information Disclosure Vulnerability...
Information disclosure
Windows CDP User Components Information Disclosure Vulnerability...
CVE-2023-35326
CVE-2023-35326 (Windows CDP User Components Information Disclosure) affects Windows CDP User Components and is rated CVSS v3.1 base 5.5 (LOCAL, Privileges Low, Confidentiality High). Evidence from NVD shows Information Disclosure vulnerability with Local access and high confidentiality impact; Mi...
