DLA-3331-1 python-cryptography - security update

Bulletin has no description...

TikTok car theft challenge: Hyundai, Kia fix flaw

Car manufacturer Hyundai, and its subsidiary Kia, began rolling out a free software update on February 14, 2023, to address a flaw in their anti-theft software, which was highlighted in a social media challenge. The release of the update came nine months after an uptick in car theft of the affect...

PT-2023-16582 · Unknown · Nuxt/Framework

Name of the Vulnerable Software and Affected Versions: nuxt/framework versions prior to 3.2.1 Description: The issue is related to Cross-site Scripting XSS - Generic. This is a type of security vulnerability that occurs when an application includes user input in its output without proper validati...

CVE-2023-0475 Go-Getter Vulnerable to Decompression Bombs

HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0...

PT-2023-13998 · Intel · Intel(R) On Event Series Android Application

Name of the Vulnerable Software and Affected Versions: IntelR ON Event Series Android application versions prior to 2.0 Description: The issue is related to insufficiently protected credentials, which may allow an authenticated user to potentially enable information disclosure via local access...

PT-2023-13016 · Intel · Intel(R) Sur

Name of the Vulnerable Software and Affected Versions: IntelR SUR software versions prior to 2.4.8902 Description: The issue is related to an improper conditions check in the software, which may allow an unauthenticated user to potentially enable denial of service via network access...

PT-2023-13011 · Intel · Intel Iris Xe Max Drivers

Name of the Vulnerable Software and Affected Versions: IntelR IrisR Xe MAX drivers for Windows versions prior to 100.0.5.1474 Description: The issue is an out-of-bounds read that may allow a privileged user to potentially enable information disclosure via local access. Recommendations: For versio...

PT-2023-3050 · Fortinet · Fortinac

Name of the Vulnerable Software and Affected Versions: FortiNAC versions 8.3.7 through 8.5.4 FortiNAC versions 8.6.0 through 8.6.5 FortiNAC versions 8.7.0 through 8.7.6 FortiNAC versions 8.8.0 through 8.8.11 FortiNAC versions 9.1.0 through 9.1.8 FortiNAC versions 9.2.0 through 9.2.7 FortiNAC...

PT-2023-12831 · Intel · Intel(R) Oneapi Data Analytics Library

Name of the Vulnerable Software and Affected Versions: IntelR oneAPI Data Analytics Library oneDAL versions prior to 2021.5 Description: The issue is related to an uncontrolled search path element in the IntelR oneAPI Data Analytics Library oneDAL, which may allow an authenticated user to...

PT-2023-13330 · Intel · Intel Sur

Name of the Vulnerable Software and Affected Versions: IntelR SUR software versions prior to 2.4.8902 Description: The issue is related to improper input validation, which may allow an unauthenticated user to potentially enable escalation of privilege via network access. Recommendations: For...

PT-2023-13427 · Intel · Intel Iris Xe Max Drivers

Name of the Vulnerable Software and Affected Versions: IntelR IrisR Xe MAX drivers for Windows versions prior to 100.0.5.1436v2 Description: The issue is related to an uncaught exception in the IntelR IrisR Xe MAX drivers for Windows, which may allow a privileged user to potentially enable denial...

PT-2023-13487 · Intel · Intel Battery Life Diagnostic Tool

Name of the Vulnerable Software and Affected Versions: IntelR Battery Life Diagnostic Tool versions prior to 2.2.0 Description: The issue is related to an uncontrolled search path in the IntelR Battery Life Diagnostic Tool software. This may allow an authenticated user to potentially enable...

PT-2023-1500 · Fortinet · Fortiweb

Name of the Vulnerable Software and Affected Versions: FortiWeb versions 6.3.6 through 6.3.18 FortiWeb versions 6.4 FortiWeb versions 7.0.0 through 7.0.1 Description: The issue is related to a relative path traversal vulnerability in FortiWeb, which may allow an authenticated attacker to obtain...

PT-2023-12900 · Cvat · Cvat

Name of the Vulnerable Software and Affected Versions: CVAT versions prior to 2.0.1 Description: The issue allows an authenticated user to potentially enable information disclosure via network access due to server-side request forgery. Recommendations: For versions prior to 2.0.1, update to versi...

PT-2023-3053 · Fortinet · Fortiweb

Name of the Vulnerable Software and Affected Versions: FortiWeb versions 7.0.0 through 7.0.3 Description: The issue is related to a double free in the software, which may allow an attacker to execute unauthorized code or commands via specially crafted commands. This can potentially enable an...

PT-2023-12922 · Palantir · Palantir Gotham

Name of the Vulnerable Software and Affected Versions: Palantir Gotham versions prior to 3.22.11.2 Description: The issue concerns an unauthenticated endpoint that could allow an attacker to exhaust the memory of the Gotham dispatch service. Recommendations: For versions prior to 3.22.11.2, updat...

PT-2023-13532 · Intel · Intel Qat Drivers For Windows

Name of the Vulnerable Software and Affected Versions: IntelR QAT drivers for Windows versions prior to 1.6 Description: The issue is related to an uncontrolled search path in some IntelR QAT drivers for Windows, which may allow an authenticated user to potentially enable escalation of privilege...

SUSE CVE-2017-5462

A flaw in DRBG number generation within the Network Security Services NSS library where the internal state V does not correctly carry bits over. The NSS library has been updated to fix this issue to address this issue and Firefox ESR 52.1 has been updated with NSS version 3.28.4. This vulnerabili...

Apple Security Update: macOS Big Sur 11.7.4

Apple recommends to install security update macOS Big Sur 11.7.4 on devices macOS Big Sur...

B&R Systems Diagnostics Manager Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple XSS Vulnerabilities product: B&R Systems Diagnostics Manager vulnerable version: =3.00 and =D4.93 CVE number: CVE-2022-4286 impact: medium homepage:...