OESA-2023-1520 python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...

PT-2023-9823

Name of the Vulnerable Software and Affected Versions 7-Zip versions prior to 24.01 Description The issue is related to an out-of-bounds read in the NTFS handler of 7-Zip. This allows an attacker to read beyond the intended buffer, with the bytes read presented as part of a filename in the file...

thunderbird: File Extension Spoofing using the Text Direction Override Character

Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly shown as being a document file, while in fact it was an executable file. Newer versions of Thunderbird will strip the character and show the correct file extension. This...

Path Traversal

@simonsmith/cypress-image-snapshot is vulnerable to Path Traversal. The vulnerability exists because the library does not properly sanitize snapshot filenames, allowing an attacker to create directories or images outside the restricted directory...

[SECURITY] [DLA 3510-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3510-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort July 31, 2023 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DSA-5463-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2023-3417

Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly shown as being a document file, while in fact it was an executable file. Newer versions of Thunderbird will strip the character and show the correct file extension. This...

Mozilla Thunderbird < 102.13.1

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 102.13.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-28 advisory. - Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be...

DEBIAN-CVE-2023-3417

Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly shown as being a document file, while in fact it was an executable file. Newer versions of Thunderbird will strip the character and show the correct file extension. This...

CVE-2023-3417

Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly shown as being a document file, while in fact it was an executable file. Newer versions of Thunderbird will strip the character and show the correct file extension. This...

UBUNTU-CVE-2023-3417

Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly shown as being a document file, while in fact it was an executable file. Newer versions of Thunderbird will strip the character and show the correct file extension. This...

CVE-2023-3417

Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly shown as being a document file, while in fact it was an executable file. Newer versions of Thunderbird will strip the character and show the correct file extension. This...

CVE-2023-3417

Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly shown as being a document file, while in fact it was an executable file. Newer versions of Thunderbird will strip the character and show the correct file extension. This...

RuoYi 跨站脚本漏洞

RuoYi is a backend management system for individual developers in China RuoYi RuoYi. A cross-site scripting vulnerability exists in RuoYi versions prior to 4.7.7. The vulnerability stems from a security issue in the uploadFilesPath function of the File Upload component, which leads to cross-site...

PT-2023-3680

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 115.0.1 Thunderbird versions prior to 102.13.1 Description The issue exists due to the incorrect handling of the Unicode character for text direction override in filenames. This could allow a remote attacker to...

Security Vulnerabilities fixed in Thunderbird 115.0.1 — Mozilla

During the worker lifecycle, a use-after-free condition could have occurred, which could have led to a potentially exploitable crash. Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly shown as being a document file, while in...

DEBIAN-CVE-2023-38336

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778...

CVE-2023-38336

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778...

CVE-2023-38336

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778...

Command injection

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778...