Two remote code execution vulnerabilities disclosed in Microsoft Excel

Cisco Talos recently discovered two vulnerabilities in the Microsoft Excel spreadsheet management software that could allow a malicious actor to execute arbitrary code on the targeted machine. Microsoft disclosed these issues and patched them as part of Junes monthly security release for the...

Fedora 37 : wordpress (2023-f238593a42)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-f238593a42 advisory. WordPress 6.2.2 Security Release Security updates included in this release: Block themes parsing shortcodes in user-generated data; thanks to Liam Gladdy of ...

SUSE-SU-2023:2326-1 Security update for amazon-ssm-agent

This update of amazon-ssm-agent fixes the following issues: - rebuild the package with the go 1.19 security release bsc1200441...

SUSE-SU-2023:2324-1 Security update for cni-plugins

This update of cni-plugins fixes the following issues: - rebuild the package with the go 1.19 security release bsc1200441...

SUSE-SU-2023:2322-1 Security update for terraform-provider-helm

This update of terraform-provider-helm fixes the following issues: - rebuild the package with the go 1.19 security release bsc1200441...

PT-2023-36190 · Amazon · Amazon-Ssm-Agent

Name of the Vulnerable Software and Affected Versions: amazon-ssm-agent affected versions not specified Description: The issue is related to a security release in the Go programming language, version 1.19. The amazon-ssm-agent package has been rebuilt with this security release to address the...

PT-2023-36187 · Google +1 · Go +1

Name of the Vulnerable Software and Affected Versions: Terraform affected versions not specified Description: The issue is related to a security release in Go 1.19, which Terraform is rebuilt with to address the problem. Recommendations: At the moment, there is no information about a newer versio...

WordPress Jetpack Plugin <= 12.1 is vulnerable to Broken Access Control

Software Jetpack Type Plugin Vulnerable versions = 12.1 Fixed in 12.1.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE N/A Patch priority High CVSS severity High 9 Developer Claim ownership PSID e45930af254c Credits Jetpack Required privilege Author Published 30...

PT-2023-36185 · Hashicorp · Terraform-Provider-Helm

Name of the Vulnerable Software and Affected Versions: terraform-provider-helm affected versions not specified Description: The issue is related to a security release in Go 1.19. The terraform-provider-helm package has been rebuilt with this security release to address the issue. Recommendations:...

PT-2023-36188 · Unknown · Cni-Plugins

Name of the Vulnerable Software and Affected Versions: cni-plugins affected versions not specified Description: The issue is related to the go 1.19 security release. The package cni-plugins has been rebuilt to address this issue. Recommendations: At the moment, there is no information about a new...

PT-2023-36189 · Cni +1 · Cni +1

Name of the Vulnerable Software and Affected Versions: cni affected versions not specified Description: The issue is related to a security release in the go 1.19 package, which is used to rebuild the cni package. Recommendations: At the moment, there is no information about a newer version that...

SUSE-SU-2023:2288-1 Security update for kubernetes1.18

This update of kubernetes1.18 fixes the following issues: - rebuild the package with the go 1.19 security release bsc1200441 bsc1209658...

PT-2023-36181 · Go +1 · Go +1

Name of the Vulnerable Software and Affected Versions: kubernetes1.18 version 1.18 Description: The issue is related to a security release in the go 1.19 package, which is used by kubernetes1.18. The package has been rebuilt with the go 1.19 security release to address the issue. Recommendations:...

PT-2023-36179 · Unknown · Geoipupdate

Name of the Vulnerable Software and Affected Versions: geoipupdate affected versions not specified Description: The issue is related to the geoipupdate package, which has been rebuilt with the go 1.19 security release. Recommendations: At the moment, there is no information about a newer version...

SUSE-SU-2023:2261-1 Security update for terraform-provider-null

This update of terraform-provider-null fixes the following issues: - rebuild the package with the go 1.19 security release bsc1200441 bsc1209658...

PT-2023-36177 · Unknown · Terraform-Provider-Null

Name of the Vulnerable Software and Affected Versions: terraform-provider-null affected versions not specified Description: The issue is related to a security release in Go 1.19, which required a rebuild of the terraform-provider-null package. Recommendations: At the moment, there is no informati...

WordPress Unspecified Vulnerability (May 2023) - Linux

WordPress is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress";...

SUSE-SU-2023:2253-1 Security update for terraform-provider-aws

This update of terraform-provider-aws fixes the following issues: - rebuild the package with the go 1.19 security release bsc1200441 bsc1209658...

SUSE-SU-2023:2212-1 Security update for prometheus-sap_host_exporter

This update of prometheus-saphostexporter fixes the following issues: - rebuild the package with the go 1.19 security release bsc1200441 bsc1209658...

PT-2023-36170 · Unknown +1 · Prometheus-Sap Host Exporter +1

Name of the Vulnerable Software and Affected Versions: prometheus-sap host exporter affected versions not specified Description: The issue is related to the go 1.19 security release. The estimated number of potentially affected devices worldwide is not available. There is no information about...