UBUNTU-CVE-2024-24557

Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if the image is built FROM scratch. Also, changes to some instructions most important being HEALTHCHECK and ONBUILD would not cause a cache miss. An...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.10 : Postfix update (USN-6591-2)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6591-2 advisory. USN-6591-1 fixed vulnerabilities in Postfix. A fix with less risk of regression has been made available since the last...

GHSA-475G-VJ6C-XF96 CrateDB database has an arbitrary file read vulnerability

Summary There is an arbitrary file read vulnerability in the CrateDB database, and authenticated CrateDB database users can read any file on the system. Details There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, a...

Information disclosure

CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time. There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and authenticated attackers can use the COPY...

PT-2024-20456 · Cratedb · Cratedb

Name of the Vulnerable Software and Affected Versions: CrateDB versions prior to 5.3.9 CrateDB versions prior to 5.4.8 CrateDB versions prior to 5.5.4 CrateDB versions prior to 5.6.1 Description: The CrateDB database has a flaw in its COPY FROM function, which allows authenticated attackers to...

CrateDB Path Traversal Vulnerability

CrateDB is a distributed and scalable SQL database from CrateDB, Inc. A path traversal vulnerability exists in CrateDB versions prior to 5.3.9, 5.4.8, 5.5.4, and 5.6.1, which stems from a flaw in the COPY FROM function that can be exploited to import the contents of an arbitrary file into a...

CVE-2023-4554

OpenText AppBuilder (Windows/Linux) is affected by CVE-2023-4554 due to an XML External Entity (XXE) processing flaw in the XML processor. An authenticated attacker can upload crafted XML to trigger server-side requests and potentially disclose local server files. Affected versions are 21.2 throu...

USN-6611-1 exim4 vulnerability

It was discovered that Exim incorrectly handled certain requests. A remote attacker could possibly use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism...

CVE-2024-0937

A vulnerability, which was classified as critical, has been found in vanderSchaar LAB synthcity 0.2.9. Affected by this issue is the function loadfromfile of the component PKL File Handler. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been...

PYSEC-2024-21

A vulnerability classified as critical was found in vanderSchaar LAB TemporAI 0.0.3. Affected by this vulnerability is the function loadfromfile of the component PKL File Handler. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the...

PT-2024-15921 · Unknown · Van Der Schaar Lab Temporai

Name of the Vulnerable Software and Affected Versions: van der Schaar LAB TemporAI version 0.0.3 Description: A critical vulnerability was found in the function load from file of the component PKL File Handler, leading to deserialization. The attack can be launched remotely. The vendor was...

Malicious code in wlwz-2312-6107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7495afd91e3ecba3ef1eede78227095124832a71cdc60e582ac4c233e4aa63fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-5406 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98f42b01ab31a06f273c8ac0dc5b11d2f9a0c2956dbfaa74cacd18d168a969f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-4003 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cade04019c93cac90303a5399259e82b8997c3c8f1a87492ac0b131a9086357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Important: exim

Issue Overview: Exim through 4.97 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports . but some...

It was discovered that when exec'ing from a non-leader thread armed POSIX CPU timers would be left on a list but freed leading to a use-after-free.

...

CVE-2024-23174

An issue was discovered in the PageTriage extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. XSS can occur via the rev-deleted-user, pagetriage-tags-quickfilter-label, pagetriage-triage, pagetriage-filter-date-range-format-placeholder,...

CVE-2023-49180

creationtimestamp| type| source ---|---|--- 2024-01-11 15:52:11+00:00| seen| https://t.me/ctinow/166577...

CVE-2023-6561

The Featured Image from URL FIFU plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the featured image alt text in all versions up to, and including, 4.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

Fedora 38 : exim (2024-e0841c83bb)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e0841c83bb advisory. Security fix for CVE-2023-51766. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...