CVE-2023-38610

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2023-42831

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to fingerprint the user...

MAL-2024-42 Malicious code in error-can-not-resolve-resource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f44848c297338de1e97a9c4d961ba8f2441f2464713bd36229bf5c0fb7509455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-31 Malicious code in ether-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c0daa6287f78623d9fd9d2bd501403142d5196ad67ff5eb49c867d9dea7504a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2023-50569

DO NOT USE THIS CVE RECORD. Consult IDs: CVE-2023-50250. Reason: This record is a reservation duplicate of CVE-2023-50250. Notes: All CVE users should reference CVE-2023-50250 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

MAL-2023-8739 Malicious code in hackathon-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c2b5db7a78bdce1245f6a6eac22c3251fa6bde8775c352c70a7a7c3f1d16bf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8720 Malicious code in hpulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8e05ef1449de96d2983cf58d8db74565a1a331c63044ce1c166505af88b7409 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8707 Malicious code in arrays-string (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 058ca280756e331336b85903607b74f86355c7e7d889a956dc9a904f6e2c5485 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CLSA-2023-1702496332 squid: Fix of CVE-2023-46728

CVE-2023-46728: Remove support for Gopher protocol - Enable test-suite...

CLSA-2023-1702420474 Fix CVE(s): CVE-2023-46728

SECURITY UPDATE: Denial of Service attack against Squid’s Gopher gateway due to a NULL pointer dereference bug - debian/patches/CVE-2023-46728.patch: Remove support for Gopher protocol - CVE-2023-46728...

MAL-2023-8677 Malicious code in sentrybrowser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d612638266f3e357a904ecb6eb51c3d2579e19d19916e47b18615e802b311f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-6342

Tyler Technologies Court Case Management Plus allows a remote attacker to authenticate as any user by manipulating at least the 'CmWebSearchPfp/Login.aspx?xyzldk=' and 'payforprintCM/Redirector.ashx?userid=' parameters. The vulnerable "pay for print" feature was removed on or around 2023-11-01...

CVE-2023-6343

Tyler Technologies Court Case Management Plus allows a remote, unauthenticated attacker to enumerate and access sensitive files using the tiffserver/tssp.aspx 'FN' and 'PN' parameters. This behavior is related to the use of a deprecated version of Aquaforest TIFF Server, possibly 2.x. The...

CVE-2023-6342 Tyler Technologies Court Case Management Plus "pay for print" allows authentication bypass

Tyler Technologies Court Case Management Plus allows a remote attacker to authenticate as any user by manipulating at least the 'CmWebSearchPfp/Login.aspx?xyzldk=' and 'payforprintCM/Redirector.ashx?userid=' parameters. The vulnerable "pay for print" feature was removed on or around 2023-11-01...

CVE-2023-6342 Tyler Technologies Court Case Management Plus "pay for print" allows authentication bypass

Tyler Technologies Court Case Management Plus allows a remote attacker to authenticate as any user by manipulating at least the 'CmWebSearchPfp/Login.aspx?xyzldk=' and 'payforprintCM/Redirector.ashx?userid=' parameters. The vulnerable "pay for print" feature was removed on or around 2023-11-01...

CLSA-2023-1700591071 kernel: Fix of 10 CVEs

openvswitch: fix OOB access in reservesfasize CVE-2022-2639 - xen/blkfront: fix leaking data in shared pages CVE-2022-26365 - Bluetooth: Fix slab-out-of-bounds read in hciextendedinquiryresultevt CVE-2020-36386 - btrfs: only search for leftinfo if there is no rightinfo in trymergefreespace...

MAL-2023-8536 Malicious code in ifl-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15d842c50e1aff05fb5874d61c1f60e5a803cc51a39cda09deb405e5c6935bce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2022-32933

An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.5. A website may be able to track the websites a user visited in Safari private browsing mode...

Low: ecs-init

Issue Overview: No CVE associated with this advisory Affected Packages: ecs-init Issue Correction: Run dnf update ecs-init --releasever 2023.2.20231113 or dnf update --advisory ALAS2023-2023-434 --releasever 2023.2.20231113 to update your system. More information on how to update your system can ...

MAL-2023-8512 Malicious code in ifl-themes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48feb67bb74a41bf7d6a8a2af193a0b1bd05e258f0b562a031efacd017914f1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...