USN-6410-1: GRUB2 vulnerabilities

It was discovered that a specially crafted file system image could cause a heap-based out-of-bounds write. A local attacker could potentially use this to perform arbitrary code execution bypass and bypass secure boot protections. CVE-2023-4692 It was discovered that a specially crafted file syste...

The vulnerability of the program/lib/Roundcube/rcube_string_replacer.php component of the RoundCube Webmail client allows a attacker to perform cross-site scripting attacks.

The vulnerability of the program/lib/Roundcube/rcubestringreplacer.php component of the RoundCube Webmail client exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...

The vulnerability of the Markdown component of the WYSIWYG editor Froala Editor, which allows a hacker to execute arbitrary code.

The vulnerability of the Markdown component of the WYSIWYG editor Froala Editor exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in Apple iOS 17 and iPadOS 17, which stems from the fact that an attacker who...

The vulnerability of the software for managing medical organizations, OpenEMR, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the software for managing medical organizations, OpenEMR, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...

CVE-2023-2508

The PaperCutNG Mobility Print version 1.0.3512 application allows an unauthenticated attacker to perform a CSRF attack on an instance administrator to configure the clients host in the "configure printer discovery" section. This is possible because the application has no protections against CSRF...

The vulnerability of the IBM QRadar SIEM system for event collection and analysis arises from the lack of protective measures for the website structure. This allows attackers to circumvent the restrictions on JavaScript execution.

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to bypass restrictions on JavaScript execution...

CLSA-2023-1695046791 Fix of 7 CVEs

Bionic update: upstream stable patchset 2022-12-01 LP: 1998542 // CVE-2022-26373 - x86/speculation: Add RSB VM Exit protections Bionic update: upstream stable patchset 2022-12-01 LP: 1998542 - Revert "x86/cpu: Add a steppings field to struct x86cpuid" - x86/cpufeature: Add facility to check for m...

The vulnerability of the LuCI interface in the embedded operating system OpenWrt, which allows a hacker to perform XSS attacks.

The vulnerability of the LuCI interface in the embedded operating system OpenWrt is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability in the Redmine project and task management web application relates to the lack of security measures for the website structure, allowing an attacker to carry out XSS attacks.

The vulnerability in the Redmine project and task management web application relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Russian Journalist's iPhone Compromised by NSO Group's Zero-Click Spyware

The iPhone belonging to Galina Timchenko, a prominent Russian journalist and critic of the government, was compromised with NSO Group's Pegasus spyware, a new collaborative investigation from Access Now and the Citizen Lab has revealed. The infiltration is said to have happened on or around...

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the software used for managing and automating data analysis modeling processes in Alteryx Server arises from the lack of measures taken to protect the website structure. This vulnerability allows attackers to execute cross-site scripting attacks (XSS).

The vulnerability of Alteryx Server, a software tool for managing and automating data analysis processes, exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks XSS through the type field...

The vulnerability in the data_sources.php script of the Cacti network monitoring software allows a hacker to perform cross-site scripting attacks.

The vulnerability in the datasources.php script of the Cacti network monitoring software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability in the data_debug.php script of the Cacti network monitoring software allows a hacker to perform cross-site scripting attacks.

The vulnerability of the datadebug.php script used by the Cacti network monitoring tool exists due to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Google Maps API Super Store Finder software lies in its lack of protection against SQL query structures, allowing attackers to gain access to the administration panel.

The vulnerability of the Google Maps API Super Store Finder integration tool is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to the administration panel...

The vulnerability of the application development environment and the Angular development platform, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to carry out XSS attacks.

The vulnerability of the application development environment and the Angular single-page application platform exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the file_manage_view.php component in the DedeCMS content management system, which stems from the lack of protective measures for website structures, allows attackers to carry out XSS attacks.

The vulnerability of the filemanageview.php component in the DedeCMS content management system is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...

Design/Logic Flaw

shescape is simple shell escape library for JavaScript. This may impact users that use Shescape on Windows in a threaded context. The vulnerability can result in Shescape escaping or quoting for the wrong shell, thus allowing attackers to bypass protections depending on the combination of expecte...

CVE-2023-29182

A stack-based buffer overflow vulnerability CWE-121 in Fortinet FortiOS before 7.0.3 allows a privileged attacker to execute arbitrary code via specially crafted CLI commands, provided the attacker were able to evade FortiOS stack protections...