openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0082-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0082-1 advisory. - Use after free in Passwords in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to...

Flickr: High resource consumption by insufficient sanitization of forum threads pagination

The forum threads pagination functionality was insufficiently sanitized, leading to high resource consumption. When a page number was provided in the URL that exceeded the number of available pages, an infinite loop was triggered, generating excessive markup on each iteration. The issue was...

Vulnerabilities fixed in Google Chrome

Google has fixed several vulnerabilities in Chrome. A remote malicious person could exploit the vulnerabilities to perform execute attacks that can lead to the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Access to sensitive data To exploit the...

Security Bulletin: IBM Watson CloudPak for Data Data Stores are vulnerable to web pages stored locally which can be read by another user on the system

Summary IBM Watson CP4D Data Stores allows web pages to be stored locally which can be read by another user on the system. Vulnerability Details CVEID:CVE-2023-27545 DESCRIPTION: IBM Watson CP4D Data Stores allows web pages to be stored locally which can be read by another user on the system. CVS...

CVE-2023-27578 Galaxy vulnerable to unauthorized modification of pages/visualizations due to insufficient permission check

Galaxy is an open-source platform for data analysis. All supported versions of Galaxy are affected prior to 22.01, 22.05, and 23.0 are affected by an insufficient permission check. Unsupported versions are likely affected as far back as the functionality of Visualizations/Pages exists. Due to thi...

CVE-2023-27578

CVE-2023-27578 affects the Galaxy open-source data-analysis platform. The root cause is an insufficient permission check, allowing an attacker to modify or delete any Galaxy Visualization or Galaxy Page, or copy/import a Visualization, if they know the encoded ID. Affected versions include all su...

PT-2023-21220 · Galaxy · Galaxy

Name of the Vulnerable Software and Affected Versions: Galaxy versions prior to 22.01 Galaxy versions prior to 22.05 Galaxy versions prior to 23.0 Description: Galaxy is an open-source platform for data analysis. The issue is caused by an insufficient permission check, allowing an attacker to...

Cross site scripting

The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via some of its settings parameters in versions up to, and including, 3.3.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

Contec CONPROSYS IoT Gateway 安全漏洞

Contec CONPROSYS IoT Gateway is an IoT gateway software from Contec Japan. A security vulnerability exists in Contec CONPROSYS IoT Gateway that stems from the presence of improper access control, which can be exploited by an attacker to access network maintenance pages to obtain network informati...

Adobe Dimension USD File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of USD...

Design/Logic Flaw

IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 183329...

CVE-2020-4556 IBM Financial Transaction Manager information disclosure

IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 183329...

CVE-2023-25968

Cross-Site Request Forgery CSRF vulnerability in Cozmoslabs, Madalin Ungureanu, Antohe Cristian Client Portal – Private user pages and login plugin = 1.1.8 versions...

IBM Financial Transaction Manager for High Value Payments for Multi-Platform 安全漏洞

IBM Financial Transaction Manager for High Value Payments for Multi-Platform FTM HVP is a financial transaction manager for multi-platform from International Business Machines IBM. The product is primarily used to monitor, track and report on financial payments and transactions. A security...

PT-2023-20393 · Cozmoslabs · Client Portal – Private User Pages/Login Plugin

Name of the Vulnerable Software and Affected Versions: Cozmoslabs, Madalin Ungureanu, Antohe Cristian Client Portal – Private user pages and login plugin versions = 1.1.8 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an...

WordPress Plugin Cristian Client Portal – Private user pages and login 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Cristian Client Portal -...

The vulnerability of the malidp_check_pages_threshold() function (drivers/gpu/drm/arm/malidp_planes.c) in the Linux operating system’s Mali-DP kernel driver allows a hacker to trigger a service failure.

The vulnerability of the malidpcheckpagesthreshold function drivers/gpu/drm/arm/malidpplanes.c in the Linux operating system’s Mali-DP kernel driver is related to pointer swapping errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

[SECURITY] Fedora 38 Update: unpaper-7.0.0-7.fc38

unpaper is a post-processing tool for scanned sheets of paper, especially for book pages that have been scanned from previously created photocopies. The main purpose is to make scanned book pages better readable on screen after conversion to PDF. Additionally, unpaper might be useful to enhance t...

Fedora: Security Advisory for unpaper (FEDORA-2023-a5e10b188a)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Google Chrome Web Payments API Component Code Issue Vulnerability

Google Chrome is a web browser from Google, an American company. A code issue vulnerability exists in versions prior to Google Chrome 111.0.5563.64, which stems from a weak policy enforcement issue in the Web Payments API component. A remote attacker could exploit the vulnerability to bypass...