Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : Thunderbird vulnerabilities (USN-6563-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6563-1 advisory. Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a...

[SECURITY] [DLA 3705-1] php-guzzlehttp-psr7 security update

Debian LTS Advisory DLA-3705-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin December 31, 2023 https://wiki.debian.org/LTS Package : php-guzzlehttp-psr7 Version : 1.4.2-0.1+deb10u2 CVE ID : CVE-2023-29197 Debian Bug : 1034581 It was discovered that...

[SECURITY] [DLA 3700-1] cjson security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3700-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz December 30, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3699-1] libde265 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3699-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz December 30, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3698-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3698-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort December 29, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3697-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3697-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort December 29, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3696-1] asterisk security update

Debian LTS Advisory DLA-3696-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany December 28, 2023 https://wiki.debian.org/LTS Package : asterisk Version : 1:16.28.0dfsg-0+deb10u4 CVE ID : CVE-2023-37457 CVE-2023-38703 CVE-2023-49294 CVE-2023-49786 Debian Bug :...

CVE-2023-50267 MeterSphere horizontal privilege escalation vulnerability of resources in project scope.

MeterSphere is a one-stop open source continuous testing platform. Prior to 2.10.10-lts, the authenticated attackers can update resources which don't belong to him if the resource ID is known. This issue if fixed in 2.10.10-lts. There are no known workarounds...

CVE-2023-50267

MeterSphere (open source continuous testing platform) has a horizontal privilege escalation vulnerability tracked as CVE-2023-50267. Before version 2.10.10-lts, an authenticated attacker could update resources that do not belong to them if they know the resource ID. The issue is fixed in 2.10.10-...

CVE-2023-50267 MeterSphere horizontal privilege escalation vulnerability of resources in project scope.

MeterSphere is a one-stop open source continuous testing platform. Prior to 2.10.10-lts, the authenticated attackers can update resources which don't belong to him if the resource ID is known. This issue if fixed in 2.10.10-lts. There are no known workarounds...

MeterSphere Security Vulnerabilities

MeterSphere is MeterSphere's open source one-stop open source continuous testing platform. A security vulnerability exists in versions prior to MeterSphere 2.10.10-lts, which stems from the fact that an authenticated attacker can update a resource that does not belong to him with a known resource...

PT-2023-8327 · Scada-Lts · Scada-Lts

Name of the Vulnerable Software and Affected Versions: Scada-LTS versions 2.7.5.2 build 4551883606 and before Description: The issue is related to insufficient access control in the Event Handlers function of the Scada-LTS mult-platform web solution for creating Scada systems. This allows remote...

[SECURITY] [DLA 3692-1] curl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3692-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 19, 2023 https://wiki.debian.org/LTS -...

CVE-2023-46177

IBM MQ Appliance (9.3 LTS and 9.3 CD) contains a remote path-traversal vulnerability due to how it handles crafted URL requests, allowing an attacker to view arbitrary files on the system. Affected versions include 9.3 LTS and 9.3 CD prior to the fixes. Remediation: apply IBM MQ Appliance 9.3.0.1...

[SECURITY] [DLA 3691-1] spip security update

Debian LTS Advisory DLA-3691-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin December 18, 2023 https://wiki.debian.org/LTS Package : spip Version : 3.2.4-1+deb10u12 Multiple security issues were discovered in SPIP, a content management system, which could lead to...

Debian dla-3691 : spip - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3691 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3691-1 [email protected] https://www.debian.org/lts/security/...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : Vim vulnerabilities (USN-6557-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6557-1 advisory. It was discovered that Vim could be made to dereference invalid memory. An attacker could possibly us...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : YAJL vulnerabilities (USN-6233-2)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6233-2 advisory. USN-6233-1 fixed vulnerabilities in YAJL. This update provides the corresponding updates for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and...

Ubuntu: Security Advisory (USN-6546-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : audiofile vulnerabilities (USN-6558-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6558-1 advisory. It was discovered that audiofile could be made to dereference invalid memory. If a user or an automat...