12580 matches found
PT-2023-16419 · Squidex · Squidex
Name of the Vulnerable Software and Affected Versions: squidex/squidex versions prior to 7.4.0 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository squidex/squidex. This is a type of attack where an attacker tricks a user into performing unintended actions...
PT-2023-15070 · Unknown · Js Help Desk
Name of the Vulnerable Software and Affected Versions: JS Help Desk plugin versions = 2.7.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application...
PT-2023-1424 · Adobe · Framemaker
Name of the Vulnerable Software and Affected Versions: Adobe FrameMaker versions 2020 Update 4 and earlier, 2022 and earlier Description: The issue is related to improper input validation, which could result in arbitrary code execution in the context of the current user. Exploitation requires use...
PT-2023-18453 · F5 · Big-Ip Edge Client
Name of the Vulnerable Software and Affected Versions: BIG-IP Edge Client versions 7.2.2 through 7.2.3.1 Description: A DLL hijacking issue exists in the BIG-IP Edge Client Windows Installer. This affects versions of the software starting from 7.2.2 up to but not including 7.2.3.1. Note that...
PT-2023-18429 · Bip-Ip · Bip-Ip
Name of the Vulnerable Software and Affected Versions: BIP-IP versions 13.1.x BIP-IP versions 14.1.x before 14.1.5.3 BIP-IP versions 15.1.x before 15.1.8.1 BIP-IP versions 16.1.x before 16.1.3.3 BIP-IP versions 17.0.x before 17.0.0.2 Description: When an OCSP authentication profile is configured ...
PT-2023-7354 · F5 · Big-Ip
Name of the Vulnerable Software and Affected Versions: BIG-IP versions 13.1.x BIG-IP versions 14.1.x through 14.1.5.2 BIG-IP versions 15.1.x through 15.1.8.0 BIG-IP versions 16.1.x through 16.1.3.2 Description: The issue is related to a buffer overflow in memory, which can be exploited by a remot...
DSA-5338-1 cinder - security update
Bulletin has no description...
GSD-2023-1001828 f2fs: let's avoid panic if extent_tree is not created
f2fs: let's avoid panic if extenttree is not created This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.271 by commit...
Vulnerability in Driver Distributor where passwords are stored in a recoverable format
Overview Driver Distributor provided by FUJIFILM Business Innovation Corp. contains a vulnerability where passwords are stored in a recoverable format CWE-257. Sato Ryo, Yokoi Hiroshi, and Shiga Takuma of BroadBand Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the...
PT-2023-34894 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.229 Description: The issue is related to the memblock free late function, where pages are not always released to the buddy allocator. This could potentially lead to security vulnerabilities, although the...
PT-2023-34739 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.0 through v6.1.7 Description: A null-deref issue was found in the gsmi get variable function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v3.0 through...
PT-2023-34913 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.0 through v4.14.303 Description: A null-deref issue was found in the gsmi get variable function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v3.0...
PT-2023-34821 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.90 Description: The issue concerns the xhci component of the Linux Kernel, where an endpoint is not checked for validity before being dereferenced. This could potentially lead to security vulnerabilities,...
PT-2023-34817 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.15.90 Description: A null pointer dereference issue occurs when the host dies, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...
PT-2023-34893 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.229 Description: The issue is related to an overflow before widen in the bitmap ip create function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
DLA-3304-1 fig2dev - security update
Bulletin has no description...
SUSE-SU-2023:0212-1 Security update for nginx
This update for nginx fixes the following issues: - CVE-2022-41741: Handle duplicated atoms in mp4 streams, to mitigate out-of-bound reads. bsc1204526 - CVE-2022-41742: Handle duplicated atoms in mp4 streams, to mitigate out-of-bound reads. bsc1204527...
PT-2023-2262
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.30 through 2.4.55 uWSGI PyPI package versions prior to 2.0.22 Description The issue is related to HTTP Response Smuggling vulnerability in Apache HTTP Server via mod proxy uwsgi. Special characters in the origin...