Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An...

PT-2023-11745 · Even Balance · Even Balance Punkbuster

Name of the Vulnerable Software and Affected Versions: Even Balance Punkbuster versions 1.902 through 1.904 Description: The issue allows remote attackers to execute arbitrary code due to a Directory Traversal vulnerability in the Server functionality. Recommendations: For Even Balance Punkbuster...

Moving to RFwebUI from deprecated themes Default, Green Bubble, or X1

Show the information of deprecated themes Default, Green Bubble, or X1,...

SUSE-SU-2023:3307-1 Security update for docker

This update for docker fixes the following issues: - Update to v20.10.25-ce - CVE-2023-28840: Fixed a bug where an attacker could inject arbitrary Ethernet frames to execute a Denial of Service attack. bsc1214107 - CVE-2023-28841: Fixed a bug which allows an attacker to sit in a trusted position ...

PT-2023-22954 · WordPress · Icontrolwp Article Directory Redux

Name of the Vulnerable Software and Affected Versions: iControlWP Article Directory Redux plugin versions 1.0.2 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin access can inject malicious scrip...

PT-2023-22721 · Kiboko · Kiboko Labs Watu Quiz Plugin

Name of the Vulnerable Software and Affected Versions: Kiboko Labs Watu Quiz plugin versions = 3.3.9.2 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to steal...

DSA-5477-1 samba - security update

Bulletin has no description...

DLA-3527-1 sox - security update

Bulletin has no description...

SUSE-SU-2023:3289-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20230808 release. bsc1214099 - CVE-2022-40982: Fixed a potential security vulnerability in some Intel� Processors which may allow information disclosure. - CVE-2023-23908: Fixed a potential security...

CVE-2023-40254

Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Malicious Software Update.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through...

CVE-2023-40254

Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Malicious Software Update.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through...

Design/Logic Flaw

Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Malicious Software Update.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through...

CVE-2023-40254

Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Malicious Software Update.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through...

CVE-2023-40254

Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Malicious Software Update.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through...

PT-2023-20376 · Intel · Intel(R) Vcust Tool

Name of the Vulnerable Software and Affected Versions: IntelR VCUST Tool versions prior to those downloaded on February 3rd, 2023 Description: The issue is related to an uncontrolled search path element in the IntelR VCUST Tool software. This may allow an authenticated user to potentially enable...

PT-2023-14609 · Intel · Intel Vroc

Name of the Vulnerable Software and Affected Versions: IntelR VROC software versions prior to 8.0.0.4035 Description: The issue is related to improper access control in IntelR VROC software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-27168 · Eprosima +2 · Eprosima Fast Dds +2

Name of the Vulnerable Software and Affected Versions: eprosima Fast DDS versions prior to 2.11.1 eprosima Fast DDS versions prior to 2.10.2 eprosima Fast DDS versions prior to 2.9.2 eprosima Fast DDS versions prior to 2.6.6 Description: The issue is related to a heap overflow that can be trigger...

PT-2023-4903 · Eprosima +2 · Eprosima Fast Dds +2

Name of the Vulnerable Software and Affected Versions: eprosima Fast DDS versions prior to 2.11.1 eprosima Fast DDS versions prior to 2.10.2 eprosima Fast DDS versions prior to 2.9.2 eprosima Fast DDS versions prior to 2.6.6 Description: The issue is caused by a heap overflow in the dynamic memor...

SUSE-SU-2023:3266-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: - CVE-2023-37327: Fixed GStreamer FLAC File Parsing Integer Overflow bsc1213128...

SUSE-SU-2023:3263-1 Security update for go1.19

This update for go1.19 fixes the following issues: - Update to go v1.19.12 released 2023-08-01 bsc1200441 - CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server while validating signatures for extremely large RSA keys. bsc1213880...