RHEL 9 : nodejs:18 (RHSA-2023:5849)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5849 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...

Important: nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack Rapid Reset Attack CVE-2023-44487 nodejs: integrity checks according t...

Important: nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack Rapid Reset Attack CVE-2023-44487 A AlmaLinux Security Bulletin which...

Node.js Data Forgery Issue Vulnerability

Node.js is an open source, cross-platform JavaScript runtime environment. A data forgery issue vulnerability exists in Node.js versions 18.x , 20.x. The vulnerability stems from the fact that when the Node.js policy function checks the integrity of a resource against a trusted list, an applicatio...

Synel Security Vulnerabilities

Synel is a time and attendance management system from Synel Israel. A security vulnerability exists in Synel Terminals versions prior to 3015.1 that stems from downloading source code from a remote location without integrity checking...

CODESYS Development System Data Falsification Issue Vulnerability

3s-smart Software Solutions CODESYS Development System is a suite of programming tools for the field of industrial controllers and automation technology from 3s-smart Software Solutions, Germany. A data forgery vulnerability exists in CODESYS Development System versions 3.5.11.20 through 3.5.19.2...

Node.js: Integrity checks according to policies can be circumvented

The Node.js policy feature, which checks the integrity of a resource against a trusted manifest, could be circumvented by intercepting the operation and returning a forged checksum, effectively disabling the integrity check. This vulnerability affected all users using the experimental policy...

CVE-2023-33668

DigiExam up to v14.0.2 lacks integrity checks for native modules, allowing attackers to access PII and takeover accounts on shared computers...

CVE-2023-33668

DigiExam up to v14.0.2 lacks integrity checks for native modules, allowing attackers to access PII and takeover accounts on shared computers...

CVE-2023-33668

DigiExam up to v14.0.2 lacks integrity checks for native modules, allowing attackers to access PII and takeover accounts on shared computers...

CVE-2023-33668

CVE-2023-33668 affects DigiExam up to v14.0.2, where there is a lack of integrity checks for native modules. The issue enables attackers on shared computers to access PII and potentially take over user accounts, per multiple sources including Red Hat and NVD entries. The root cause is insufficien...

DigiExam 安全漏洞

DigiExam is an exam platform from the Swedish company DigiExam. A security vulnerability exists in DigiExam version v14.0.2, which stems from a lack of integrity checking of native modules, allowing an attacker to access PII and take over accounts on a shared computer...

CVE-2023-33668

DigiExam up to v14.0.2 lacks integrity checks for native modules, allowing attackers to access PII and takeover accounts on shared computers...

SAMSUNG Smart Switch PC 安全漏洞

SAMSUNG Smart Switch PC is a Windows software from Samsung South Korea. It is used for data transfer. A security vulnerability exists in Smart Switch PC prior to version 4.3.230521, which stems from improper validation of integrity checks and allows a local attacker to delete arbitrary directorie...

PT-2023-22870 · Samsung · Smart Switch Pc

Name of the Vulnerable Software and Affected Versions: Smart Switch PC versions prior to 4.3.23052 1 Description: The issue is related to improper validation of integrity checks, allowing local attackers to delete arbitrary directories using directory junctions. Recommendations: For versions prio...

SUSE CVE-2023-31438

An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."...

DEBIAN-CVE-2023-31439

An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security...

CVE-2023-31438

Mode C: Affected product: systemd 253. Issue: attacker can truncate a sealed log file and then resume log sealing to make integrity checks pass despite modifications. Connected Red Hat doc for CVE-2023-31438 repeats this description and notes the vendor’s reply denying that it is a security vulne...

The vulnerability of the JSE component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows attackers to disclose protected information or create, delete, or alter access to data.

The vulnerability of the JSE component of Oracle Java SE software and the Oracle GraalVM Enterprise Edition virtual machine is related to the lack of integrity checks for messages. Exploiting this vulnerability can allow an attacker to disclose protected information or create, delete, or alter...

The vulnerability of the Kerberos5 implementation by Heimdal, related to incorrect verification of integrity checks, allows a perpetrator to perform a logical inversion.

The vulnerability of the Kerberos5 protocol implementation by Heimdal is related to incorrect validation of integrity checks. Exploiting this vulnerability allows a malicious actor to perform logical inversion, resulting in the integrity checks for messages in gssap/arcfour being inverted...