SUSE-SU-2023:2979-1 Security update for mysql-connector-java

This update for mysql-connector-java fixes the following issues: - CVE-2023-21971: Fixed a denial-of-service vulnerability in the java.sql.DriverManager.getConnection method when used with untrusted inputs bsc1211247...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to VMware Tanzu Spring Framework denial of service vulnerabilitiy [CVE-2023-20863]

Summary Potential VMware Tanzu Spring Framework denial of service vulnerabilitiy have been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerability have been addressed. Refer to details for additional information. CVE-2023-20863 Vulnerability Details...

SUSE-SU-2023:2478-2 Security update for mariadb

This update for mariadb fixes the following issues: Updated to version 10.5.20: - CVE-2022-47015: Fixed a denial of service that could be triggered by a crafted SQL query bsc1207404...

Icewarp Icearp 跨站脚本漏洞

Icewarp Icearp is an email, messaging and collaboration service for small, medium and enterprise-level businesses from the Czech company Icewarp. A cross-site scripting vulnerability exists in Icewarp Icearp version 10.2.1, which stems from the presence of a cross-site scripting XSS vulnerability...

Oracle MySQL Server <= 5.7.41, 8.x <= 8.0.32 Security Update (cpujul2023) - Windows

Oracle MySQL Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2023-24021 · Unknown · Telephony Service

Name of the Vulnerable Software and Affected Versions: Telephony service affected versions not specified Description: The issue is related to a missing permission check in the telephony service, which could lead to local information disclosure without requiring additional execution privileges...

PT-2023-24538 · Unknown · Telephony Service

Name of the Vulnerable Software and Affected Versions: Telephony service affected versions not specified Description: The issue is related to a missing permission check in the telephony service, which could lead to local information disclosure without requiring additional execution privileges...

PT-2023-23071 · Unknown · Telephony Service

Name of the Vulnerable Software and Affected Versions: Telephony service affected versions not specified Description: The issue is related to a missing permission check in the telephony service, which could lead to local information disclosure without requiring additional execution privileges...

PT-2023-23056 · Unknown · Opm Service

Name of the Vulnerable Software and Affected Versions: opm service affected versions not specified Description: The issue is related to a missing permission check in the opm service, which could lead to local information disclosure without requiring additional execution privileges. Recommendation...

IBM DB2 Denial of Service Vulnerability (CNVD-2023-64878)

IBM DB2 Denial of Service Vulnerability CNVD-2023-64879...

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Ziguang Zhanrui UNISOC. A security vulnerability exists in some UNISOC products, which stems from a lack of privilege checking in the messaging service, leading to local information leakage. The following products are affected:...

PT-2023-24553 · Unknown · Fm Service

Name of the Vulnerable Software and Affected Versions: FM service affected versions not specified Description: The issue is related to a possible missing parameters check in the FM service. This could lead to a local denial of service, and system execution privileges are needed to exploit it...

PT-2023-23052 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to a missing permission check in a messaging service. This could lead to local information disclosure without requiring additional execution privileges...

PT-2023-24552 · Unknown · Telephony Service

Name of the Vulnerable Software and Affected Versions: Telephony service affected versions not specified Description: The issue is related to a missing permission check in the telephony service, which could lead to local information disclosure without requiring additional execution privileges...

CVE-2023-32044 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

...

Denial Of Service (DoS)

github.com/corazawaf/coraza is vulnerable to Denial Of Service DoS. The vulnerability exists in the Read function of multipart.go due to misuse of the log.Fatalf function, which allows an attacker to cause an application crash by providing maliciously crafted requests...

SUSE-SU-2023:2793-1 Security update for bind

This update for bind fixes the following issues: - CVE-2023-2828: Fixed denial-of-service against recursive resolvers related to cache-cleaning algorithm bsc1212544...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Node.js glob-parent denial of service vulnerability( CVE-2021-35065)

Summary Potential Node.js glob-parent denial of service vulnerability CVE-2021-35065 has been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. Refer to details for additional information. Vulnerability Details CVEID:CVE-2021-35065 DESCRIPTION: Node.js glob-parent module...

PAX Technology A930 操作系统命令注入漏洞

PAX Technology A930 is an Android mobile payment terminal from PAX Technology China. A security vulnerability exists in the PAX Technology A930 PayDroid7.1.1VirgoV04.5.0220220722 version, which originates from allowing arbitrary commands to be executed by using the exec service and including...

Amazon Linux AMI : c-ares (ALAS-2023-1770)

The version of c-ares installed on the remote host is prior to 1.17.2-1.9. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1770 advisory. Denial of Service. An issue in c-ares was found where a 0-byte UDP payload can cause a Denial of Service CVE-2023-32067. Tenable h...