CLSA-2023-1697463600 Fix CVE(s): CVE-2023-42116, CVE-2023-42114

SECURITY UPDATE: Multiple security issues - debian/patches/CVE-2023-42114.patch: fix possible OOB read in SPA authenticator - CVE-2023-42114 - debian/patches/CVE-2023-42116.patch: fix possible OOB write in SPA authenticator - CVE-2023-42116...

AZL-31304 CVE-2023-44487 affecting package cri-tools for versions less than 1.28.0-2

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

CVE-2023-41660

Cross-Site Request Forgery CSRF vulnerability in WPSynchro WP Synchro plugin = 1.9.1 versions...

CVE-2023-43953

SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Content Management component...

CVE-2023-41309

Permission control vulnerability in the MediaPlaybackController module. Successful exploitation of this vulnerability may affect availability...

CVE-2023-41300

Vulnerability of parameters not being strictly verified in the PMS module. Successful exploitation of this vulnerability may cause the system to restart...

CVE-2023-41299

DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart...

CVE-2023-36727

Microsoft Edge Chromium-based Spoofing Vulnerability...

CVE-2023-37739

i-doit Pro v25 and below was discovered to be vulnerable to path traversal...

CVE-2023-36772

3D Builder Remote Code Execution Vulnerability...

CVE-2023-36764

Microsoft SharePoint Server Elevation of Privilege Vulnerability...

CVE-2023-36766

Microsoft Excel Information Disclosure Vulnerability...

CVE-2023-36761

Microsoft Word Information Disclosure Vulnerability...

CVE-2023-36759

Visual Studio Elevation of Privilege Vulnerability...

BELL-CVE-2020-8618 CVE-2020-8618 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2016-10197 CVE-2016-10197 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2020-0601 CVE-2020-0601 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2022-27385 CVE-2022-27385 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2020-29361 CVE-2020-29361 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2020-35505 CVE-2020-35505 does not affect BellSoft software

Bulletin has no description...