SUSE CVE-2023-0474

Use after free in GuestView in Google Chrome prior to 109.0.5414.119 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a Chrome web app. Chromium security severity: Medium...

CVE-2023-25729

Permission prompts for opening external schemes were only shown for ContentPrincipals resulting in extensions being able to open them without user interaction via ExpandedPrincipals. This could lead to further malicious actions such as downloading files or interacting with software already...

CVE-2023-22937

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the lookup table upload feature let a user upload lookup tables with unnecessary filename extensions. Lookup table file extensions may now be one of the following only: .csv, .csv.gz, .kmz, .kml, .mmdb, or .mmdb.gzl...

Design/Logic Flaw

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the lookup table upload feature let a user upload lookup tables with unnecessary filename extensions. Lookup table file extensions may now be one of the following only: .csv, .csv.gz, .kmz, .kml, .mmdb, or .mmdb.gzl...

CVE-2023-22937 Unnecessary File Extensions Allowed by Lookup Table Uploads in Splunk Enterprise

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the lookup table upload feature let a user upload lookup tables with unnecessary filename extensions. Lookup table file extensions may now be one of the following only: .csv, .csv.gz, .kmz, .kml, .mmdb, or .mmdb.gzl...

Description of the security update for SharePoint Foundation 2013: February 14, 2023 (KB5002347)

Description of the security update for SharePoint Foundation 2013: February 14, 2023 KB5002347 Summary This security update resolves a Microsoft SharePoint Server elevation of privilege vulnerability and Microsoft Word remote code execution vulnerability. To learn more about the vulnerabilities,...

Description of the security update for SharePoint Server Subscription Edition: February 14, 2023 (KB5002353)

Description of the security update for SharePoint Server Subscription Edition: February 14, 2023 KB5002353 Applies To SharePoint Server Subscription Edition Summary This security update resolves a Microsoft SharePoint Server elevation of privilege vulnerability and Microsoft Word remote code...

Description of the security update for SharePoint Server 2019: February 14, 2023 (KB5002342)

Description of the security update for SharePoint Server 2019: February 14, 2023 KB5002342 Applies To SharePoint Server 2019 Summary This security update resolves a Microsoft SharePoint Server elevation of privilege vulnerability and Microsoft Word remote code execution vulnerability. To learn mo...

Description of the security update for SharePoint Enterprise Server 2016: February 14, 2023 (KB5002350)

Description of the security update for SharePoint Enterprise Server 2016: February 14, 2023 KB5002350 Applies To SharePoint Server 2016 Summary This security update resolves a Microsoft SharePoint Server elevation of privilege vulnerability. To learn more about the vulnerability, see Microsoft...

CVE-2023-22937: Improper Input Validation

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the lookup table upload feature let a user upload lookup tables with unnecessary filename extensions. Lookup table file extensions may now be one of the following only: .csv, .csv.gz, .kmz, .kml, .mmdb, or .mmdb.gzl...

Intel 2023.1 IPU – BIOS February 2023 Security Updates

Intel has informed HP of potential vulnerabilities identified in some Intel® Processors with Intel® Software Guard Extensions SGX that might allow information disclosure and potential vulnerabilities in the BIOS firmware and Intel® Trusted Execution Technology TXT Secure Initialization SINIT...

PT-2023-18780 · Splunk · Splunk Enterprise

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 8.1.13 Splunk Enterprise versions prior to 8.2.10 Splunk Enterprise versions prior to 9.0.4 Description: The lookup table upload feature in Splunk Enterprise allowed users to upload lookup tables with...

PT-2023-9408 · Intel +4 · Intel Processors +4

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper isolation of shared resources in some IntelR Processors when using IntelR Software Guard Extensions, which may allow a privileged user to...

Splunk code issues and vulnerabilities

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A code...

MAL-2023-1889 Malicious code in kcalendar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1450a2f449693cff84949672b75ca2f472d5f7de72d279f609be36ff5d4cb19b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2315 Malicious code in tkcaalendar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 954677803cf5ebe654bfd7eedd0a3164de3ac7c292e6f8d0c262c076f8b02728 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in tkalendar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cc429bccca75f57bfabb5cbe57f6c52388f3a446e9aa277514d0d531dd523fa1 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1588 Malicious code in bautifulsoup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ab40423490af9af7ea200dd7bf4d0f176a355844a887b3319139b82ec1b11fb4 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beauifulsoup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 27adc3ec6282fb2c6e0701756ba1abcbfa669db81b01d6e106c5ec06699202eb Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1643 Malicious code in beeautifulsoup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 48df79f5920068aec8708f4f064f6290a6b69116ffa7d826630e41b1bdeb5036 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...