[SECURITY] [DLA 3389-1] lldpd security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3389-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb April 10, 2023 https://wiki.debian.org/LTS -...

USN-6010-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2023-29537, CVE-2023-29540,...

Debian DLA-3390-1 : zabbix - LTS security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3390 advisory. - Zabbix through 4.4.0alpha1 allows User Enumeration. With login requests, it is possible to enumerate application usernames based on the variability of server...

Debian dla-3389 : liblldpctl-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3389 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3389-1 [email protected]...

Debian dla-3391 : firefox-esr - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3391 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3391-1 [email protected]...

USN-6008-1: Exo vulnerability

It was discovered that Exo did not properly sanitized desktop files. A remote attacker could possibly use this issue to to cause a crash or arbitrary code execution...

USN-6004-1: Linux kernel (Intel IoTG) vulnerabilities

It was discovered that the KVM VMX implementation in the Linux kernel did not properly handle indirect branch prediction isolation between L1 and L2 VMs. An attacker in a guest VM could use this to expose sensitive information from the host OS or other guest VMs. CVE-2022-2196 It was discovered...

KB5025234: Windows 10 LTS 1507 Security Update (April 2023)

The remote Windows host is missing security update 5025234. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-28275 - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability...

[SECURITY] [DLA 3388-1] lldpd security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3388-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb April 10, 2023 https://wiki.debian.org/LTS -...

CVE-2022-41976

An privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows remote attackers, authenticated in the application as a low-privileged user to change role e.g., to administrator by updating their user profile...

Privilege escalation

An privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows remote attackers, authenticated in the application as a low-privileged user to change role e.g., to administrator by updating their user profile...

Debian dla-3388 : keepalived - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3388 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3388-1 [email protected] https://www.debian.org/lts/security/...

CVE-2022-41976

An privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows remote attackers, authenticated in the application as a low-privileged user to change role e.g., to administrator by updating their user profile...

CVE-2022-41976

Summary: CVE-2022-41976 affects Scada-LTS v2.7.1.1 build 2948559113. A privileged escalation exists where an authenticated, low-privileged user can modify their own user profile to gain higher rights (e.g., administrator). The root cause is an authorization issue in the user profile update pathwa...

Debian dla-3382 : libopenimageio-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3382 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3382-1 [email protected]...

CVE-2022-41976

An privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows remote attackers, authenticated in the application as a low-privileged user to change role e.g., to administrator by updating their user profile...

Scada-LTS 安全漏洞

Scada-LTS is an open source, web-based, multi-platform solution from Scada-LTS Open Source. A security vulnerability exists in Scada-LTS version 2.7.1.1, which originates when an attacker elevates privileges by updating a user profile...

Debian dla-3384 : libtomcat9-embed-java - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3384 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3384-1 [email protected]...

Debian dla-3387 : gir1.2-udisks-2.0 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3387 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3387-2 [email protected] https://www.debian.org/lts/security/...

Ubuntu 20.04 LTS : Linux kernel (BlueField) vulnerabilities (USN-6000-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6000-1 advisory. It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain...