CVE-2023-41057 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in hyper-bump-it

hyper-bump-it is a command line tool for updating the version in project files.hyper-bump-it reads a file glob pattern from the configuration file. That is combined with the project root directory to construct a full glob pattern that is used to find files that should be edited. These matched fil...

CVE-2023-41057 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in hyper-bump-it

hyper-bump-it is a command line tool for updating the version in project files.hyper-bump-it reads a file glob pattern from the configuration file. That is combined with the project root directory to construct a full glob pattern that is used to find files that should be edited. These matched fil...

CVE-2023-41057

hyper-bump-it is a command line tool for updating the version in project files.hyper-bump-it reads a file glob pattern from the configuration file. That is combined with the project root directory to construct a full glob pattern that is used to find files that should be edited. These matched fil...

CVE-2023-41057

Hyper-bump-it contains a Path Traversal vulnerability due to not checking that the globbed files reside under the project root. The code joins project root with a config-supplied string to build the target path, which can cause edits to files outside the project. The issue is fixed in release v0....

CVE-2023-41057: Improper Limitation of a Pathname to a Restricted Directory

hyper-bump-it is a command line tool for updating the version in project files.hyper-bump-it reads a file glob pattern from the configuration file. That is combined with the project root directory to construct a full glob pattern that is used to find files that should be edited. These matched fil...

Hyper Bump It Path Traversal Vulnerability

Hyper Bump It is a command line tool used to update the version in the project file required for the next release. A path traversal vulnerability exists in versions of Hyper Bump It prior to 0.5.1, which stems from not checking files in the project root directory...

PT-2023-27765

Name of the Vulnerable Software and Affected Versions hyper-bump-it versions prior to 0.5.1 Description The issue arises from hyper-bump-it reading a file glob pattern from the configuration file and combining it with the project root directory to construct a full glob pattern. This pattern is us...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Microsoft Windows Multiple Vulnerabilities (KB5009543)

This host is missing an important security update according to Microsoft KB5009543 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

PT-2025-37539

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash can occur in the hv pci restore msi msg function during hibernation when a Linux virtual machine with an assigned PCI device runs on Hyper-V. This happens if the PCI device drive...

PT-2025-41091

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel’s VMBus client driver has an issue where it attempts to access resources of the ACPI namespace root object, which has an all-ones handle. This can lead to a NULL pointer...

CVE-2023-36908

Windows Hyper-V Information Disclosure Vulnerability...

CVE-2023-36908

Windows Hyper-V Information Disclosure Vulnerability...

Information disclosure

Windows Hyper-V Information Disclosure Vulnerability...

CVE-2023-36908 Windows Hyper-V Information Disclosure Vulnerability

...

CVE-2023-36908 Windows Hyper-V Information Disclosure Vulnerability

...

CVE-2023-36908

CVE-2023-36908 details are not publicly provided in the supplied documents. No explicit affected products, root cause, or remediation are described. Monitor for updates from official sources.

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Windows Hyper-V Information Disclosure Vulnerability

...

PT-2023-4383 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to a lack of protection for sensitive data in the Windows Hyper-V system, which can allow an attacker to disclose protected information. There is no information...