Multiple vulnerabilities in Fuji Electric V-Server

Overview V-Server provided by FUJI ELECTRIC CO., LTD. contains multiple vulnerabilities listed below. Stack-based Buffer ovewflow CWE-121 - CVE-2022-47908 Out-of-bounds Read CWE-125 - CVE-2022-41645 Out-of-bounds Write CWE-787 - CVE-2022-47317 Michael Heinzl reported these vulnerabilities to...

PT-2023-15971 · Unknown · Daloradius

Name of the Vulnerable Software and Affected Versions: daloradius versions prior to master-branch Description: The issue concerns a code injection problem in the GitHub repository lirantal/daloradius. Recommendations: For versions prior to the master-branch, update to the master-branch or later t...

PT-2023-1560 · Suse · Libzypp-Plugin-Appdata +1

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise Server for SAP 15-SP3 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426 openSUSE Leap 15.4 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426 Description: The issue is related to an Improper...

CVE-2022-37933

A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be exploited to allow local unauthorized data injection. HPE has made the following software updates to resolve the vulnerability in HPE Superdome Flex firmware...

PT-2023-14244 · Aruba · Clearpass Onguard +1

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.x: 6.10.7 and below Aruba ClearPass Policy Manager versions 6.9.x: 6.9.12 and below Description: A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance...

PT-2023-14245 · Aruba · Clearpass Onguard Linux Agent +1

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.x: 6.10.7 and below Aruba ClearPass Policy Manager versions 6.9.x: 6.9.12 and below Description: A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance...

PT-2023-14243 · Aruba · Aruba Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.x: 6.10.7 and below Aruba ClearPass Policy Manager versions 6.9.x: 6.9.12 and below Description: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an...

PT-2023-14242 · Aruba · Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: ClearPass Policy Manager versions 6.9.12 and below ClearPass Policy Manager versions 6.10.7 and below Description: The issue concerns the web-based management interface of ClearPass Policy Manager, where an authenticated remote attacker could...

PT-2023-12985 · Prosyst · Prosys Opc Ua Simulation Server

Name of the Vulnerable Software and Affected Versions: Prosys OPC UA Simulation Server versions prior to 5.3.0-64 UA Modbus Server versions 1.4.18-5 and prior Description: The issue concerns insufficient protection of credentials, potentially allowing an attacker to obtain user credentials and ga...

PT-2023-14914 · Tellus +1 · Tellus +1

Name of the Vulnerable Software and Affected Versions: V-SFT versions 6.1.7.0 and earlier TELLUS versions 4.0.12.0 and earlier Description: The issue allows a local attacker to obtain information and/or execute arbitrary code by having a user open a specially crafted image file. This is due to an...

SUSE-SU-2023:0007-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2022-3109: Fixed null pointer dereference in vp3decodeframe bsc1206442...

PT-2023-14252 · WordPress · Letsrecover

Name of the Vulnerable Software and Affected Versions: LetsRecover WordPress plugin versions prior to 1.2.0 Description: The issue is related to a SQL injection that occurs because a parameter is not properly sanitized and escaped before being used in a SQL statement. This can be exploited by hig...

DLA-3253-1 openvswitch - security update

Bulletin has no description...

SUSE-SU-2022:4639-1 Security update for polkit-default-privs

This update for polkit-default-privs fixes the following issues: Update to version 13.2+20221216.a0c29e6: - backport usbguard actions bsc1206414...

PT-2022-28144

Name of the Vulnerable Software and Affected Versions M-Files Server versions prior to 22.10.11846.0 Description The issue allows sensitive information to be inserted into log files, potentially enabling the obtainment of sensitive tokens from logs if specific configurations are set...

DSA-5306-1 gerbv - security update

Bulletin has no description...

PT-2022-8078 · Sierra Wireless · Sierra Wireless Aleos

Name of the Vulnerable Software and Affected Versions: Sierra Wireless ALEOS versions prior to 4.4.9 Sierra Wireless ALEOS versions 4.5.x through 4.9.x before 4.9.5 Sierra Wireless ALEOS versions 4.10.x through 4.13.x before 4.14.0 Description: The ACENet service in Sierra Wireless ALEOS allows...

PT-2022-27672 · Unknown · Planet Estream

Name of the Vulnerable Software and Affected Versions: Planet eStream versions prior to 6.72.10.07 Description: The issue allows a low-privileged user to gain access to administrative and high-privileged user accounts by changing the value of the ON cookie. A brute-force attack can calculate a...

PT-2022-27675 · Unknown · Planet Estream

Name of the Vulnerable Software and Affected Versions: Planet eStream versions prior to 6.72.10.07 Description: The issue allows unauthenticated upload of arbitrary files, which can lead to remote code execution. This can be achieved through "Choose a Video / Related Media or Upload Document" or ...

PT-2022-27078 · Microsoft · Mssql

Name of the Vulnerable Software and Affected Versions: Simmeth Lieferantenmanager versions prior to 5.6 Description: An issue was discovered that allows an attacker to inject raw SQL queries. By activating MSSQL features, the attacker can execute arbitrary commands on the MSSQL server via the xp...