ALSA-2023:6077 Moderate: toolbox security update

The rhel9/toolbox container image can be used with Toolbox to obtain AlmaLinux based containerized command line environments to aid with development and software testing. Toolbox is built on top of Podman and other standard container technologies from OCI. This updates the rhel9/toolbox image in...

CVE-2023-39733

The leakage of the client secret in TonTon-Tei Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

PT-2023-27089 · Unknown · Tokueimaru Waiting Line

Name of the Vulnerable Software and Affected Versions: Tokueimaru waiting Line version 13.6.1 Description: The issue allows attackers to obtain the channel access token and send crafted broadcast messages due to the leakage of the client secret. Recommendations: For Tokueimaru waiting Line versio...

CVE-2023-39732

The leakage of the client secret in Tokueimaruwaiting Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

CVE-2023-39739

The leakage of the client secret in REGINA SWEETS&BAKERY Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

CVE-2023-46316

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines...

CVE-2023-39737

CVE-2023-39737 affects Matsuya Line 13.6.1, where leakage of the client secret can enable attackers to obtain the channel access token and send crafted broadcast messages. Multiple sources in connected documents corroborate this description, including Red Hat/CISA context and NVD entries. The pre...

CVE-2023-39740

Onigiriya-musubee Line 13.6.1 is reported to leak the client secret, enabling an attacker to obtain the channel access token and send crafted broadcast messages. Root cause: improper handling/storage of the client secret leading to exposure. Impact: potential impersonation and unauthorized broadc...

CVE-2023-39733

The CVE-2023-39733 entry concerns TonTon-Tei Line v13.6.1, where leakage of the client secret allows an attacker to obtain the channel access token and send crafted broadcast messages. The documents describe the vulnerability vector and impact (information disclosure enabling unauthorized channel...

PT-2023-27092 · Unknown · Uomasa Saiji News Line

Name of the Vulnerable Software and Affected Versions: Uomasa Saiji news Line version 13.6.1 Description: The issue allows attackers to obtain the channel access token and send crafted broadcast messages due to the leakage of the client secret. Recommendations: For Uomasa Saiji news Line version...

The vulnerability of the command-line interface (CLI) of Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause service interruptions.

The vulnerability of the command-line interface CLI of Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2023-27091 · Unknown · Vision Meat Works Trackdiner10/10 Mc Line

Name of the Vulnerable Software and Affected Versions: VISION MEAT WORKS TrackDiner10/10 mc Line version 13.6.1 Description: The leakage of the client secret allows attackers to obtain the channel access token and send crafted broadcast messages. Recommendations: For version 13.6.1, consider...

PT-2023-27094 · Unknown · Matsuya Line

Name of the Vulnerable Software and Affected Versions: Matsuya Line version 13.6.1 Description: The leakage of the client secret allows attackers to obtain the channel access token and send crafted broadcast messages. Recommendations: For Matsuya Line version 13.6.1, update to a version that fixe...

PT-2023-27097 · Unknown · Onigiriya-Musubee Line

Name of the Vulnerable Software and Affected Versions: Onigiriya-musubee Line version 13.6.1 Description: The leakage of the client secret allows attackers to obtain the channel access token and send crafted broadcast messages. Recommendations: For Onigiriya-musubee Line version 13.6.1, update to...

CVE-2023-39737

The leakage of the client secret in Matsuya Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

CVE-2023-39733

The leakage of the client secret in TonTon-Tei Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

The vulnerability of the command-line interface (CLI) of Juniper Networks’ Junos OS Evolved operating system, which allows a attacker to trigger a service failure.

The vulnerability of the command-line interface CLI of Juniper Networks’ Junos OS Evolved operating system is related to incorrect checking of the return value of methods or functions. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2023-27090 · Unknown · Tonton-Tei Line

Name of the Vulnerable Software and Affected Versions: TonTon-Tei Line version 13.6.1 Description: The leakage of the client secret allows attackers to obtain the channel access token and send crafted broadcast messages. Recommendations: For TonTon-Tei Line version 13.6.1, at the moment, there is...

CVE-2023-39737

The leakage of the client secret in Matsuya Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

Critical: Red Hat Security Advisory: toolbox security update

An update for toolbox is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...