10177 matches found
CVE-2023-28797: Improper Link Resolution Before File Access
Zscaler Client Connector for Windows before 4.1 writes/deletes a configuration file inside specific folders on the disk. A malicious user can replace the folder and execute code as a privileged user...
AlmaLinux 9 : php (ALSA-2023:5926)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:5926 advisory. - In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, passwordverify function may accept some invalid Blowfish hashes as valid. If suc...
CLSA-2023-1697816385 curl: Fix of 2 CVEs
CVE-2022-27782: check additional TLS or SSH connection parameters that should have prohibited connection reuse - CVE-2023-27534: fix SFTP path '' resolving discrepancy - fix read off end of array for SCP home directory case...
OPENSUSE-SU-2023:0307-1 Security update for bluetuith
This update for bluetuith fixes the following issues: - Update to 0.1.7: New HJSON-based configuration format Adapter status indicators Cancellable OBEX session creation Enhanced popups Major bugfixes and improvements - Update to 0.1.5: ui: device: Show address if name is empty agent: Display...
VDI not Available
“The VDI is not available” message is displayed in XenCenter after attempting to start a Virtual Machine VM. Background The additional details of “VDI is not available” error are not displayed. This article describes the error messages, the reasons for VDI not available error message, extract fro...
php: 1-byte array overrun in common path resolve code
A vulnerability was found in PHP. This security issue occurs because the core path resolution function allocates a buffer one byte small. Resolving paths with lengths close to the system MAXPATHLEN setting may lead to the byte after the allocated buffer being overwritten with a NULL value, which...
php: 1-byte array overrun in common path resolve code
A vulnerability was found in PHP. This security issue occurs because the core path resolution function allocates a buffer one byte small. Resolving paths with lengths close to the system MAXPATHLEN setting may lead to the byte after the allocated buffer being overwritten with a NULL value, which...
SUSE-SU-2023:3952-2 Security update for runc
This update of runc fixes the following issues: - Update to runc v1.1.8. Upstream changelog is available from . - rebuild the package with the go 1.21 security release bsc1212475...
DEBIAN-CVE-2023-38545
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host na...
CVE-2023-38545
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host na...
CVE-2023-38545
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host na...
WordPress Social proof testimonials and reviews by Repuso Plugin <= 4.97 is vulnerable to Broken Access Control
Software Social proof testimonials and reviews by Repuso Type Plugin Vulnerable versions = 4.97 Fixed in 5.00 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-46196 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID b9598b02b70d...
Advisory ROSA-SA-2023-2246
Software: c-ares 1.13.0 OS: ROSA Virtualization 2.1 packageevrstring: c-ares-1.13.0-5.rv3.src.rpm CVE-ID: CVE-2021-3672 BDU-ID: 2022-00342 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the SI library for DNS c-ares asynchronous queries is associated with failure to take measures to protect the...
Updated the curl packages to fix two security vulnerabilities
curl/libcurl is vulnerable to a heap buffer overflow in its SOCKS5 support that could be exploited by a remote web server when curl is configured to use a SOCKS5 proxy with remote hostname resolution. libcurl is vulnerable to a cookie injection attack where a local attacker can inject cookies int...
curl: heap based buffer overflow in the SOCKS5 proxy handshake
A heap-based buffer overflow flaw was found in the SOCKS5 proxy handshake in the Curl package. If Curl is unable to resolve the address itself, it passes the hostname to the SOCKS5 proxy. However, the maximum length of the hostname that can be passed is 255 bytes. If the hostname is longer, then...
K000137229: BIND vulnerability CVE-2022-38178
Security Advisory Description By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources. CVE-2022-38178 Impact DNS...
2023-10 Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems (KB5031356)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
less: Denial of service
Background less is a pager and text file viewer. Description less suffered from a flaw in its terminal escape sequence handling which made its filtering incomplete. Impact Malicious input could clear the terminal output or otherwise manipulate it with faked interactions. Workaround There is no...