PT-2025-54016

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the F2FS filesystem within the Linux kernel that could lead to potential data corruption when moving a directory. This issue is similar to one found and addressed in ext...

PT-2023-22751 · Jenkins · Jenkins Report Portal Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Report Portal Plugin versions 0.5 and earlier Description: The Jenkins Report Portal Plugin stores ReportPortal access tokens unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These tokens can...

Mozilla Releases Security Advisories for Multiple Products

Mozilla has released security advisories for vulnerabilities affecting multiple Mozilla products. A cyber threat actor could exploit these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply the necessary...

April 11, 2023—KB5025271 (Monthly Rollup)

None None...

April 11, 2023—KB5025272 (Security-only update)

None None...

April 11, 2023—KB5025285 (Monthly Rollup)

None None...

April 11, 2023—KB5025273 (Security-only update)

None None...

April 11, 2023—KB5025277 (Security-only update)

None None...

April 11, 2023—KB5025288 (Security-only update)

None None...

KB5021123 - Description of the security update for SQL Server 2012 SP4 GDR: February 14, 2023

None None...

KB5020863 - Description of the security update for SQL Server 2008 SP4 GDR: February 14, 2023

None None...

April 11, 2023—KB5025279 (Monthly Rollup)

None None...

April 11, 2023—KB5025287 (Monthly Rollup)

None None...

Mozilla Firefox ESR 缓冲区错误漏洞

Mozilla Firefox ESR is an extended support release of Firefox web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox ESR. An attacker could exploit the vulnerability to cause out-of-bounds memory access using the WebGL API, which could lea...

Mozilla Firefox ESR 安全漏洞

Mozilla Firefox ESR is an extended support release of Firefox web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox ESR prior to version 102.10, which originates from a line break in a filename that can bypass the file extension security...

Mozilla Firefox ESR 缓冲区错误漏洞

Mozilla Firefox ESR is an extended support release of Firefox web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox ESR prior to 102.10, which stems from unexpected data returned from the Safe Browsing API that could lead to...

Vulnerability of the printing functions of Firefox browsers, Firefox ESR, and Thunderbird email client on Windows operating systems, allowing attackers to execute arbitrary code.

The vulnerability of the printing functions of Firefox’s browser, Firefox ESR, and Thunderbird’s email client on Windows operating systems is related to an operation that goes beyond the buffer in memory when processing the DEVMODEW structure. Exploiting this vulnerability allows a remote attacke...

Mozilla Firefox ESR 安全漏洞

Mozilla Firefox ESR is an extended support release of Firefox web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions prior to Mozilla Firefox ESR 102.10 Firefox for Linux, which originated when Firefox did not properly handle downloads of files...

Mozilla Firefox ESR 安全漏洞

Mozilla Firefox ESR is an extended support version of Firefox web browser from the Mozilla Foundation. A security vulnerability exists in Mozilla Firefox ESR, which originates from the presence of a memory corruption that can be exploited by attackers to run arbitrary code...

NewStart CGSL CORE 5.05 / MAIN 5.05 : samba Multiple Vulnerabilities (NS-SA-2023-0016)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has samba packages installed that are affected by multiple vulnerabilities: - A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the...