SUSE SLES15: kubevirt-container-disk / kubevirt-manifests / kubevirt-tests / etc (SUSE-SU-2023:4693-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4693-1 advisory. Kubevirt is rebuilt against updated dependencies to fix security issues. Tenable has extracted the preceding description block...

postgresql: Role pg_signal_backend can signal certain superuser processes.

A flaw was found in PostgreSQL involving the pgcancelbackend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would...

CVE-2023-49240

Unauthorized access vulnerability in the launcher module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49240

Unauthorized access vulnerability in the launcher module. Successful exploitation of this vulnerability may affect service confidentiality...

Design/Logic Flaw

Unauthorized access vulnerability in the launcher module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49240

Unauthorized access vulnerability in the launcher module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49240

CVE-2023-49240 affects the launcher module in Huawei HarmonyOS (launcher component). The vulnerability is described as an unauthorized access issue that could impact service confidentiality. Connected sources document this in several feeds (e.g., Huawei HarmonyOS bulletin, Red Hat advisory, and P...

PT-2023-31127 · Launcher · Launcher

Name of the Vulnerable Software and Affected Versions: Launcher module affected versions not specified Description: The issue concerns unauthorized access in the launcher module, which could impact service confidentiality upon successful exploitation. Recommendations: At the moment, there is no...

Malicious code in port-launcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85da8cb996dc48738626c7874d7a4fedfcdbcb3294d0950ee6274abfaa54cc96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ASB-A-295334906

In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

postgresql: Role pg_signal_backend can signal certain superuser processes.

A flaw was found in PostgreSQL involving the pgcancelbackend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would...

HiddenDesktop - HVNC For Cobalt Strike

Hidden Desktop often referred to as HVNC is a tool that allows operators to interact with a remote desktop session without the user knowing. The VNC protocol is not involved, but the result is a similar experience. This Cobalt Strike BOF implementation was created as an alternative to...

postgresql-server -- Role pg_cancel_backend can signal certain superuser processes

PostgreSQL Project reports: Documentation says the pgcancelbackend role cannot signal "a backend owned by a superuser". On the contrary, it can signal background workers, including the logical replication launcher. It can signal autovacuum workers and the autovacuum launcher. Signaling autovacuum...

CVE-2023-46755

Vulnerability of input parameters being not strictly verified in the input. Successful exploitation of this vulnerability may cause the launcher to restart...

CVE-2023-46755

Vulnerability of input parameters being not strictly verified in the input. Successful exploitation of this vulnerability may cause the launcher to restart...

Design/Logic Flaw

Vulnerability of input parameters being not strictly verified in the input. Successful exploitation of this vulnerability may cause the launcher to restart...

CVE-2023-46755

Technical details about CVE-2023-46755 (affected products/versions, root cause, impact, and fixes) are not publicly provided in the connected documents. Monitor for updates from vendors and security bulletins to obtain concrete information.

CVE-2023-46755

Vulnerability of input parameters being not strictly verified in the input. Successful exploitation of this vulnerability may cause the launcher to restart...

CVE-2023-46755

Vulnerability of input parameters being not strictly verified in the input. Successful exploitation of this vulnerability may cause the launcher to restart...

PT-2023-30185 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns the vulnerability of input parameters not being strictly verified. Successful exploitation of this vulnerability may cause the launch...