753 matches found
SUSE-SU-2023:0836-1 Security update for dpdk
This update of dpdk fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...
CVE-2023-28098 OpenSIPS has vulnerability in the Digest Authentication Parser
OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, a specially crafted Authorization header causes OpenSIPS to crash or behave in an unexpected way due to a bug in the function parseparamname . This issue was discovered while performing coverag...
GSD-2023-1002421 net: USB: Fix wrong-direction WARNING in plusb.c
net: USB: Fix wrong-direction WARNING in plusb.c This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.306 by commit...
SUSE-SU-2023:0648-1 Security update for python-rsa
This update for python-rsa fixes the following issues: - CVE-2020-25658: Fixed a Bleichenbacher timing oracle attack against RSA decryption bsc1178676...
SUSE-SU-2023:0611-1 Security update for pkgconf
This update for pkgconf fixes the following issues: - CVE-2023-24056: Fixed unbounded string expansion due to incorrect checks in libpkgconf/tuple.c bsc1207394...
GHSA-F6HC-9G49-XMX7 nistec has Incorrect Calculation in Multiplication of unreduced P-256 scalars
Multiplication of certain unreduced P-256 scalars produce incorrect results. There are no protocols known at this time that can be attacked due to this. From the fix commit notes: Unlike the rest of nistec, the P-256 assembly doesn't use complete addition formulas, meaning that...
CVE-2023-0594
Grafana is an open-source platform for monitoring and observability. Starting with the 7.0 branch, Grafana had a stored XSS vulnerability in the trace view visualization. The stored XSS vulnerability was possible due the value of a span's attributes/resources were not properly sanitized and this...
CVE-2023-23529
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this...
SUSE-SU-2023:0512-1 Security update for libraw
This update for libraw fixes the following issues: - CVE-2021-32142: Fixed buffer overflow in the LibRawbufferdatastream:gets function bsc1208470...
SUSE CVE-2019-8607
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of proces...
CVE-2023-23934 Wrkzeug's incorrect parsing of nameless cookies leads to __Host- cookies bypass
Werkzeug is a comprehensive WSGI web application library. Browsers may allow "nameless" cookies that look like =value instead of key=value. A vulnerable browser may allow a compromised application on an adjacent subdomain to exploit this to set a cookie like =Host-test=bad for another subdomain...
JSA10376 - Pulse Policy Secure (PPS) Infranet Controller Webroot Path Disclosure Vulnerability
Last Modified Date Aug 24, 2026 12:35:05 AM...
Openldap Doesn’t Properly Handle Character in Subject Common Name (CVE-2009-3767)
Last Modified Date Aug 23, 2026 9:03:30 PM...
SA40004 - [Pulse Secure] TLS connection verification issue (CVE-2015-5369)
Last Modified Date Aug 24, 2026 12:34:42 AM...
JSA10647 - 2014-09 Security Bulletin: Junos Pulse Secure Access Service (SSL VPN): Clickjacking issue (CVE-2014-3823)
Last Modified Date Aug 24, 2026 12:35:25 AM...
SA40207 - [Pulse Secure] File content disclosure issue (CVE-2016-4787)
Last Modified Date Aug 24, 2026 12:35:17 AM...
SA43018 - 2018-01 Out-Of-Cycle Advisory: Pulse Connect Secure (PCS) / Pulse Policy Secure (PPS): Cross Site Scripting Issue
Last Modified Date Mar 4, 2024 7:52:02 PM...
SUSE-SU-2023:0263-1 Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122133 fixes several issues. The following security issues were fixed: - CVE-2022-3424: Fixed use-after-free in grusetcontextoption, grufault and gruhandleusercallos that could lead to kernel panic bsc1204167. - CVE-2022-3565: Fixed use-after-free in...
CVE-2023-24613
The user interface of Array Networks AG Series and vxAG through 9.4.0.470 could allow a remote attacker to use the gdb tool to overwrite the backend function call stack after accessing the system with administrator privileges. A successful exploit could leverage this vulnerability in the backend...