16972 matches found
SUSE SLED15: eclipse-jgit / jgit / jgit-javadoc / jsch / jsch-demo / etc (SUSE-SU-2024:0057-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0057-1 advisory. Security fix: - CVE-2023-4759: Fixed an arbitrary file overwrite which might have occurred with a special...
Medium: dmidecode
Issue Overview: Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. CVE-2023-30630 Affected Packages: dmidecode Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Vis...
USN-6569-1 libclamunrar vulnerabilities
it was discovered that libclamunrar incorrectly handled directories when extracting RAR archives. A remote attacker could possibly use this issue to overwrite arbitrary files and execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.04. CVE-2022-30333 ...
SUSE-SU-2024:0057-1 Security update for eclipse-jgit, jsch
This update for eclipse-jgit, jsch fixes the following issues: Security fix: - CVE-2023-4759: Fixed an arbitrary file overwrite which might have occurred with a specially crafted git repository and a case-insensitive filesystem. bsc1215298 Other fixes: jsch was updated to version 0.2.9: - Added...
R: Directory Traversal
Background R is a language and environment for statistical computing and graphics. Description The native R package installation mechanisms do not sufficiently validate installed source packages for path traversal. Impact Installation of a malicious R package could result in an arbitrary file...
QNAP Systems QTS and QuTS hero security vulnerabilities
QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems.QNAP Systems QTS is an operating system used by entry to mid-level QNAP NAS.QNAP Systems QuTS hero is an operating system. A security vulnerability exists in QNAP Systems QTS prior to version...
SUSE SLED15: gstreamer-plugins-bad / gstreamer-plugins-bad-chromaprint / etc (SUSE-SU-2024:0005-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0005-1 advisory. - CVE-2023-44446: Fixed GStreamer MXF File Parsing Use-After-Free bsc1217213. - CVE-2023-40475: Fixed GStreame...
OESA-2023-1995 jgit security update
A pure Java implementation of the Git version control system and command line interface. Security Fixes: Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file...
CVE-2023-23432
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...
CVE-2023-23433
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...
CVE-2023-23433
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...
CVE-2023-23436
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...
CVE-2023-23436
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...
CVE-2023-23432
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...
CVE-2023-23435
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...
CVE-2023-23435
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...
CVE-2023-23431
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...
CVE-2023-23431
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...
