Fedora: Security Advisory (FEDORA-2023-74108ca60d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for freerdp (FEDORA-2023-5e6796cb83)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: freerdp-2.11.1-1.fc37

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the FreeR DP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...

Fedora 37 : freerdp (2023-5e6796cb83)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-5e6796cb83 advisory. Update to 2.11.1 ---- Update to 2.11.0 CVE-2023-39350, CVE-2023-39351, CVE-2023-39352, CVE-2023-39353, CVE-2023-39354, CVE-2023-39356, CVE-2023-4018...

CVE-2023-32182

A Improper Link Resolution Before File Access 'Link Following' vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux Enterprise High Performance Computing 15 SP5 postfix, SUSE openSUSE Leap 15.5 postfix.This issue affects SUSE Linux Enterprise Desktop 15 SP5: before...

Input validation

A Improper Link Resolution Before File Access 'Link Following' vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux Enterprise High Performance Computing 15 SP5 postfix, SUSE openSUSE Leap 15.5 postfix.This issue affects SUSE Linux Enterprise Desktop 15 SP5: before...

CVE-2023-32182

A Improper Link Resolution Before File Access 'Link Following' vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux Enterprise High Performance Computing 15 SP5 postfix, SUSE openSUSE Leap 15.5 postfix.This issue affects SUSE Linux Enterprise Desktop 15 SP5: before...

Debian: Security Advisory (DSA-5502-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE Linux Enterprise Desktop Backlink Vulnerability

SUSE Linux Enterprise Desktop is an enterprise server version of the Linux desktop operating system from SUSE Germany. A backlink vulnerability exists in SUSE Linux Enterprise Desktop 15 SP5 that stems from the presence of incorrect link resolution before file access. Affected Products and...

The vulnerability of the Zoom Desktop software for Linux-based video conferencing systems, which stems from insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of the Zoom Desktop video conferencing software for Linux users stems from insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Mouse cursor randomly doesn't display on dual-monitor environments

Scenario 1: The mouse cursor is not displayed on the first launch VDA session. clicking can make the cursor display. Scenario 2: VDA session is in full-screen mode on the secondary monitor of the dual monitor. Move the cursor from the primary monitor to the secondary monitor, and then the cursor...

Debian DSA-5502-1 : xrdp - security update

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5502 advisory. Multiple security vulnerabilities have been found in xrdp, a remote desktop protocol server. Buffer overflows and out-of-bound writes may cause a denial of servic...

[SECURITY] [DSA 5502-1] xrdp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5502-1 [email protected] https://www.debian.org/security/ Markus Koschany September 18, 2023 https://www.debian.org/security/faq -...

CVE-2023-43090

A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool...

CVE-2023-43090

A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool...

CVE-2023-36657

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Built-in features of Windows desktop shortcuts, narrator can be abused for privilege escalation...

Docker Desktop < 2.3.0.2 Privilege Escalation

The version of Docker Desktop for Windows is prior to 2.3.0.2. It is therefore affected by a privilege escalation vulnerability whereby if a local attacker sets up their own named pipe prior to starting Docker with the same name, this attacker can intercept a connection attempt from Docker Servic...

Docker Desktop < 4.5.0 Incorrect Access Control

The version of Docker Desktop for Mac is prior to 4.5.0. Docker Desktop could be used to access any user file on the host from a container, bypassing the allowed list of shared folders. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Docker Desktop < 4.6.0 Improper Link Resolution

The version of Docker Desktop for Windows is prior to 4.6.0. It is therefore affected by a vulnerability that allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer writes its log file. Note that Nessus has not tested for this issue...

Docker Desktop < 4.6.0 DirtyPipe

The version of Docker Desktop for Mac is prior to 4.6.0. It is therefore affected by CVE-2022-0847, AKA 'DirtyPipe', an issue that could enable attackers to modify files in container images on the host, from inside a container. A flaw was found in the way the 'flags' member of the new pipe buffer...