PT-2023-24629 · WordPress · David Lingren Media Library Assistant

Name of the Vulnerable Software and Affected Versions: David Lingren Media Library Assistant plugin versions = 3.0.7 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability in a submodule of the David Lingren Media Library Assistant plugin. This...

PT-2023-6026 · Apple +6 · Macos Sonoma +10

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 macOS Sonoma versions prior to 14 Description: A use-after-free issue was addressed with improved memory management. Processing web content may lead to arbitrar...

DLA-3515-1 cjose - security update

Bulletin has no description...

PT-2023-26556 · Unknown · Matrix-Appservice-Bridge

Name of the Vulnerable Software and Affected Versions: matrix-appservice-bridge versions 4.0.0 through 8.1.1 matrix-appservice-bridge versions 9.0.0 Description: A malicious Matrix server can use a foreign user's MXID in an OpenID exchange, allowing a bad actor to impersonate users when using the...

SUSE-SU-2023:3181-1 Security update for go1.20

This update for go1.20 fixes the following issues: - Update to go v1.20.7 released 2023-08-01 bsc1206346 - CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server while validating signatures for extremely large RSA keys. bsc1213880...

Design/Logic Flaw

An issue was discovered in InsydeH2O. A malicious operating system can tamper with a runtime-writable EFI variable, leading to out-of-bounds memory reads and a denial of service. This is fixed in version 01.01.04.0016...

Researchers Discover Bypass for Recently Patched Critical Ivanti EPMM Vulnerability

Cybersecurity researchers have discovered a bypass for a recently fixed actively exploited vulnerability in some versions of Ivanti Endpoint Manager Mobile EPMM, prompting Ivanti to urge users to update to the latest version of the software. Tracked as CVE-2023-35082 CVSS score: 10.0 and discover...

PT-2023-24313 · Suprema · Suprema Biostar 2

Name of the Vulnerable Software and Affected Versions: Suprema BioStar 2 versions prior to 2.9.1 Description: A path traversal issue exists, allowing unauthenticated attackers to fetch arbitrary files from the server's web server. Recommendations: For Suprema BioStar 2 versions prior to 2.9.1,...

PT-2023-5956 · Php +11 · Php +11

Name of the Vulnerable Software and Affected Versions: PHP versions 8.0. through 8.0.29 PHP versions 8.1. through 8.1.21 PHP versions 8.2. through 8.2.7 Description: The issue is related to the way PHP's XML functions rely on libxml global state to track configuration variables. This state can be...

PT-2023-24311 · Suprema · Biostar 2

Name of the Vulnerable Software and Affected Versions: Suprema BioStar 2 versions prior to 2.9.1 Description: An authentication bypass issue exists, allowing unauthenticated users to access some functionality on BioStar 2 servers. Recommendations: For Suprema BioStar 2 versions prior to 2.9.1,...

PT-2023-4152 · Mitsubishi · Gt Softgot2000 +3

Name of the Vulnerable Software and Affected Versions: GT Designer3 versions affected versions not specified GOT2000 Series versions affected versions not specified GOT SIMPLE Series versions affected versions not specified GT SoftGOT2000 versions affected versions not specified Description: The...

PT-2023-16331 · Mitsubishi · Got Simple Series Gs25 +7

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Corporation GOT2000 Series GT27 versions 01.49.000 and prior Mitsubishi Electric Corporation GOT2000 Series GT25 versions 01.49.000 and prior Mitsubishi Electric Corporation GOT2000 Series GT23 versions 01.49.000 and prior...

Cisco BroadWorks CommPilot Application Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web-based management interface...

SUSE-SU-2023:3131-1 Security update for salt

This update for salt fixes the following issues: Security fixes: - CVE-2023-28370: Fix an open redirect vulnerability in 'StaticFileHandler' under certain configurations bsc1211741 Bug fixes: - Prevent error loading 'knownhosts' when '$HOME' is not set bsc1210994 - Fix ModuleNotFoundError and oth...

Certain HP and Samsung printer software - Potential elevation of privileges

Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element. Update the printer software...

PT-2023-23527 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions before 9.2.0 Brocade Fabric OS versions before 9.1.1c Description: An information disclosure in the web interface could allow a remote unauthenticated attacker to get technical details about the web interface...

CVE-2023-31926 - Arbitrary File Overwrite using less command

System files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0...

PT-2023-25546 · Viatom Health · Vihealth

Name of the Vulnerable Software and Affected Versions: Viatom Health ViHealth for Android versions 2.74.58 and earlier Description: The issue allows a remote attacker to execute arbitrary code via the com.viatom.baselib.mvvm.webWebViewActivity component. Recommendations: For versions 2.74.58 and...

PT-2023-24918 · Ezviz · Ezviz Cs-Cv310-A0-1C2Wfr Wifi Ip66 2.8Mm 1080P +7

Name of the Vulnerable Software and Affected Versions: EZVIZ CS-C6N-B0-1G2WF versions prior to V5.3.0 build 230215 EZVIZ CS-C6N-R101-1G2WF versions prior to V5.3.0 build 230215 EZVIZ CS-CV310-A0-1B2WFR versions prior to V5.3.0 build 230221 EZVIZ CS-CV310-A0-1C2WFR-C versions prior to V5.3.2 build...

PT-2023-25350 · Supermicro · Supermicro Motherboards

Name of the Vulnerable Software and Affected Versions: Supermicro motherboards versions prior to 03.10.35 Description: A shell-injection vulnerability in email notifications on Supermicro motherboards allows remote attackers to inject and execute arbitrary commands as root on the BMC...