Security update for python-Django1 (moderate)

openSUSE Security Update: Security update for python-Django1 Announcement ID: openSUSE-SU-2023:0390-1 Rating: moderate References: 1215978 Cross-References: CVE-2023-43665 CVSS scores: CVE-2023-43665 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-43665 SUSE: 5.3...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Zilight Zhanrui UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in the wifi service...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the ims service, with a possible method to write a privilege usage log of an application...

Security update for python-Django1 (moderate)

openSUSE Security Update: Security update for python-Django1 Announcement ID: openSUSE-SU-2023:0389-1 Rating: moderate References: 1215978 Cross-References: CVE-2023-43665 CVSS scores: CVE-2023-43665 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-43665 SUSE: 5.3...

The vulnerability of Microsoft Exchange Server’s mail server, related to deficiencies in the deserialization mechanism, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Exchange Server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

SUSE-SU-2023:4521-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service bsc1216922...

SUSE-SU-2023:4488-1 Security update for openssl1

This update for openssl1 fixes the following issues: - CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service bsc1216922...

CBL Mariner 2.0 Security Update: kured (CVE-2022-25891)

The version of kured installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-25891 advisory. - The package github.com/containrrr/shoutrrr/pkg/util before 0.6.0 are vulnerable to Denial of Service DoS via...

CVE-2023-46402

git-urls 1.0.0 allows ReDOS Regular Expression Denial of Service in urls.go...

CVE-2023-36395

Windows Deployment Services Denial of Service Vulnerability...

CVE-2023-46096

A vulnerability has been identified in SIMATIC PCS neo All versions V4.1. The PUD Manager of affected products does not properly authenticate users in the PUD Manager web service. This could allow an unauthenticated adjacent attacker to generate a privileged token and upload additional documents...

PT-2023-29597 · Aruba · Aruba Access Point

Name of the Vulnerable Software and Affected Versions: Aruba access point affected versions not specified Description: The issue concerns arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI, which is Aruba's access point management protocol. Successful exploitation of thes...

PT-2023-26843 · Intel · Intel Unison

Name of the Vulnerable Software and Affected Versions: Intel Unison affected versions not specified Description: The issue is related to improper access control in Intel Unison software, which may allow an unauthenticated user to potentially enable denial of service via network access...

SUSE-SU-2023:4426-1 Security update for python-Django1

This update for python-Django1 fixes the following issues: - CVE-2023-43665: Fixed a denial of service in django.utils.text.Truncator bsc1215978...

Code injection

IBM AIX's 7.3 Python implementation could allow a non-privileged local user to exploit a vulnerability to cause a denial of service. IBM X-Force ID: 267965...

CVE-2023-39338 - Authenticated user access protected Sentry service vulnerability

Created Date Nov 9, 2023 4:55:32 PM...

Huawei EulerOS: Security Advisory for dbus (EulerOS-SA-2023-3122)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices prior to version 3.4.10, which stems from improper authorization in the PushClientProvider o...

CVE-2023-4625 Denial-of-Service（DoS） Vulnerability in Web server function on MELSEC Series CPU module

Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period...

Oracle Linux 9 : .NET / 6.0 (ELSA-2023-6242)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6242 advisory. 6.0.124-1.0.1 - Update to .NET SDK 6.0.124 and Runtime 6.0.24 - Resolves: RHEL-14462 Tenable has extracted the preceding description block directly from the...