bbot (>=1.0.4.1233rc0, <=1.1.7.3028rc0), enoslib (>=8.3.1, <=8.4.1) +3 more potentially affected by CVE-2023-5115 via ansible (7.7.0)

ansible PYPI version 7.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - bbot =1.0.4.1233rc0, =8.3.1, =14.0.0.0rc1, =0.1.0, =0.2.0, =0.2.2 Source cves: CVE-2023-5115 Source advisory: OSV:GHSA-JPVW-P8PR-9G2X...

Fedora: Security Advisory for mingw-gstreamer1-plugins-bad-free (FEDORA-2023-0984b63b23)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Vulnerability in Apache Tomcat affects IBM Process Mining - Multiple CVEs

Summary There is a vulnerability in Apache Tomcat that could allow an remote attacker to cause a denial of service on the system. The code is used by IBM Process Mining. This bulletin identifies the security fixes to apply to address the vulnerability. Vulnerability Details CVEID:CVE-2023-44487...

Malicious code in spectro-cloud-docs (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f5f48697cbdd8e8f64a4634d5d8ea37633a9f97394cf53ceac7d2e6a05fb41e Any computer that has this package install...

PT-2023-31588 · Pluck Cms · Pluck Cms

Name of the Vulnerable Software and Affected Versions: Pluck-CMS version 4.7.18 Description: The issue is related to an arbitrary file upload vulnerability in the /inc/modules install.php component. This vulnerability allows attackers to execute arbitrary code by uploading a crafted ZIP file...

Pluck security vulnerability

Pluck is a content management system CMS developed using the PHP language. An arbitrary file upload vulnerability exists in Pluck version v4.7.18, which stems from the lack of valid validation of uploaded files in component /inc/modulesinstall.php. An attacker can exploit this vulnerability to...

KLA62433 SUI vulnerability in Microsoft Azure

A spoofing vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2023-21751 Exploitation Related products Microsoft-Azure CVE list CVE-2023-21751 high KB list Solution Install necessary updates from the KB...

CVE-2021-3187

An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged user can elevate privileges by running a malicious script that executes as root from a temporary directory during install time. This applies to macOS before 10.15.5, or Security Update...

PT-2023-12161

Name of the Vulnerable Software and Affected Versions BeyondTrust Privilege Management for Mac versions prior to 5.7 Description An issue allows an authenticated, unprivileged user to elevate privileges by running a malicious script that executes as root from a temporary directory during install...

CVE-2021-3187: Incorrect Default Permissions

An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged user can elevate privileges by running a malicious script that executes as root from a temporary directory during install time. This applies to macOS before 10.15.5, or Security Update...

[SECURITY] Fedora 38 Update: rust-coreos-installer-0.18.0-2.fc38

coreos-installer installs Fedora CoreOS or RHEL CoreOS to bare-metal machines or, occasionally, to virtual machines...

CVE-2023-42580

Improper URL validation from MCSLaunch deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to install APK from Galaxy Store...

Fedora: Security Advisory for kernel (FEDORA-2023-15deb2e32a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-28450

Name of the Vulnerable Software and Affected Versions Galaxy Store versions prior to 4.5.64.4 Description The issue is related to improper URL validation from MCSLaunch deeplink in Galaxy Store, allowing attackers to execute JavaScript API and install APK from Galaxy Store. This can lead to remot...

Dell Rugged Control Center security vulnerabilities

Dell Rugged Control Center is an application from Dell USA. It allows a range of settings to be configured on the ruggedized device, such as application settings, keyboard backlight settings, night mode settings, stealth mode settings, window settings, antenna switch settings and GPS settings. An...

PT-2023-26851 · Dell · Dell Rugged Control Center

Name of the Vulnerable Software and Affected Versions: Dell Rugged Control Center versions prior to 4.7 Description: The issue is related to improper access control. A local malicious standard user could potentially exploit this to modify content in an unsecured folder during product installation...

PT-2023-29471 · Huddly · Huddlycameraservice

Name of the Vulnerable Software and Affected Versions: Huddly HuddlyCameraService versions prior to 8.0.7, excluding version 7.99 Description: An issue in HuddlyCameraService allows attackers to manipulate files and escalate privileges via the RollingFileAppender.DeleteFile method performed by th...

WBCE_CMS

Exploit Title: WBCE CMS Version 1.6.1 Remote Command Executio...

SUSE: Security Advisory (SUSE-SU-2023:4596-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:4594-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...