Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2023-2947)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-5930 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ versions affected versions not specified Description: The issue is related to errors in processing input data in the Message Queuing component of the Windows operating system. It allows remote attackers to execu...

PT-2023-5935 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to errors in processing input data in the Message Queuing component of the Windows operating system. It allows remote attackers to execute...

PT-2023-5934 · Microsoft · Windows Message Queuing +2

Name of the Vulnerable Software and Affected Versions: Windows Message Queuing versions affected versions not specified Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to errors in processing input data in the Windows operating system's message...

The vulnerability of the eBPF subsystem in Linux kernels allows attackers to enhance their privileges.

The vulnerability of the eBPF subsystem in Linux operating systems is related to errors in processing input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the SetAPLanSettings function in the microprogramming software of the D-Link DAP-1325 wireless signal booster allows a intruder to execute arbitrary code.

The vulnerability of the SetAPLanSettings function in the microprogramming software of the D-Link DAP-1325 wireless signal booster is related to the execution of operations outside the buffer in memory when processing XML data. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of Microsoft Edge browser, related to incorrect data processing, allows a hacker to execute a spoofing attack.

The vulnerability of Microsoft Edge is related to incorrect data processing. Exploiting this vulnerability allows a remote attacker to perform a spoofing attack...

The vulnerability of the Airflow Sqoop Provider plugin in the software for creating, monitoring, and orchestrating data processing scenarios allows a attacker to execute arbitrary code.

The vulnerability of the Airflow Sqoop Provider plugin, a software tool for creating, monitoring, and orchestrating data processing scenarios, is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

PT-2023-5456 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to incorrect data processing in Microsoft Edge, allowing a remote attacker to perform a spoofing attack. Recommendations: At the moment, there is ...

CVE-2023-4863

A heap-based buffer flaw was found in the way libwebp, a library used to process "WebP" image format data, processes certain specially formatted WebP images. An attacker could use this flaw to crash or execute remotely arbitrary code in an application such as a web browser compiled with this...

The vulnerability of the setDhcpAssignRangeUpdate lan_ipaddr() function in the D-Link DAP-1325 wireless signal booster software allows a hacker to execute arbitrary code.

The vulnerability of the setDhcpAssignRangeUpdate lanipaddr function in the microprogramming software of the D-Link DAP-1325 wireless signal booster is related to the execution of operations outside the buffer in memory during the processing of XML data at the final stage. Exploiting this...

CVE-2023-25519

NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability where a restricted host may cause an incorrect user management error. A successful exploit of this vulnerability may lead to escalation of privileges...

CVE-2023-25519

NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability where a restricted host may cause an incorrect user management error. A successful exploit of this vulnerability may lead to escalation of privileges...

CVE-2023-25519

CVE-2023-25519 affects NVIDIA’s ConnectX Host Firmware for the BlueField Data Processing Unit. The issue, described as a restricted-host induced incorrect user-management error, can lead to privilege escalation if exploited. The in-field impact is consistent with a total impact on confidentiality...

PT-2023-5047 · Microsoft · Office Word +1

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: The issue is related to errors in processing input data in Microsoft Word, allowing remote attackers to execute arbitrary code and affect the system. Recommendations: At the moment,...

PT-2023-20131 · Nvidia · Nvidia Connectx Host Firmware

Name of the Vulnerable Software and Affected Versions: NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit affected versions not specified Description: The issue is related to a vulnerability in the NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit, where a...

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow lies in its lack of name-based path restrictions. This allows attackers to gain access to confidential information.

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scenarios in Airflow is related to deficiencies in path name restrictions. Exploiting this vulnerability can allow attackers to access confidential information using the runid parameter...

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow lies in the lack of a mechanism for capturing session recordings. This allows attackers to intercept user sessions.

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to the lack of a mechanism for capturing sessions. Exploiting this vulnerability allows an attacker who operates remotely to intercept a user’s session...

The vulnerability of the “Run Task” function in software for creating, monitoring, and orchestrating data processing scenarios allows attackers to access confidential information.

The vulnerability of the “Run Task” function in software for creating, monitoring, and orchestrating data processing scenarios in Airflow is related to the exposure of protected information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to...

Security Bulletin: NVIDIA BlueField Data Processing Unit - September 2023

NVIDIA has released a firmware update for the NVIDIA BlueField Data Processing Unit. This update addresses security issues that may lead to escalation of privileges. To protect your system, download and install this firmware update from the NVIDIA Networking Support page. Go to NVIDIA Product...