23003 matches found
[SECURITY] Fedora 39 Update: mediawiki-1.39.4-1.fc39
MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Read the instructions for creating wiki instances...
SUSE-SU-2023:3626-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 115.2.1 ESR bsc1215245. - CVE-2023-4863: Fixed heap buffer overflow in libwebp MFSA 2023-40 bsc1215231. The following non-security bug was fixed: - Fix i586 build by reducing debug info to -g1 bsc1210168...
SUSE-SU-2023:3609-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 115.2.1 ESR bsc1215245. - CVE-2023-4863: Fixed heap buffer overflow in libwebp MFSA 2023-40 bsc1215231. The following non-security bug was fixed: - Fix i586 build by reducing debug info to -g1 bsc1210168...
CVE-2023-25586
A flaw was found in Binutils. A logic fail in the bfdinitsectiondecompressstatus function may lead to the use of an uninitialized variable that can cause a crash and local denial of service...
Jetty vulnerable to errant command quoting in CGI Servlet
If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for a binary with a space in its name, the servlet will escape the command by wrapping it in quotation marks. This wrapped command, plus an optional command prefix, will then be executed through a call to Runtime.exec. If the...
Conversion Manager 8.3.0 - For Citrix Hypervisor 8.2 Cumulative Update 1
Conversion Manager 8.3.0 - For Citrix Hypervisor 8.2 Cumulative Update 1 Who Should Install This Update? This Conversion Manager virtual appliance update is for customers who use the Conversion Manager feature of Citrix Hypervisor 8.2 CU1. It constitutes the following deliverable: File Name|...
Design/Logic Flaw
A vulnerability in the access control list ACL processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to incomplete support for this feature. An attacker could exploit th...
PT-2023-5418 · Intel · Intel Driver & Support Assistant
Name of the Vulnerable Software and Affected Versions: Intel Driver & Support Assistant affected versions not specified Description: The issue is related to incorrect link resolution before accessing a file in the DSA service of Intel Driver & Support Assistant. This allows a local attacker to...
CVE-2023-41885 Piccolo's current `BaseUser.login` implementation is vulnerable to time based user enumeration
Piccolo is an ORM and query builder which supports asyncio. In versions 0.120.0 and prior, the implementation of BaseUser.login leaks enough information to a malicious user such that they would be able to successfully generate a list of valid users on the platform. As Piccolo on its own does not...
Risk Fact #5: Keeping the Pace of Remediation at Cloud Scale Requires Automation
Qualys Blog Series – 2023 TotalCloud Security Insights by the Threat Research Unit The 2023 TotalCloud Security Insights report from the Qualys Threat Research Unit TRU provides research insights, best practices, and detailed recommendations organized by five separate Risk Facts. The insights wil...
VTScanner - A Comprehensive Python-based Security Tool For File Scanning, Malware Detection, And Analysis In An Ever-Evolving Cyber Landscape
VTScanner is a versatile Python tool that empowers users to perform comprehensive file scans within a selected directory for malware detection and analysis. It seamlessly integrates with the VirusTotal API to deliver extensive insights into the safety of your files. VTScanner is compatible with...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
September 12, 2023—KB5030279 (Security-only update)
None None...
September 12, 2023—KB5030265 (Monthly Rollup)
None None...
September 12, 2023—KB5030261 (Security-only update)
None None...
September 12, 2023—KB5030287 (Security-only update)
None None...
September 12, 2023—KB5030269 (Monthly Rollup)
None None...
KB5030330: Servicing stack update for Windows Server 2012: September 12, 2023
KB5030330: Servicing stack update for Windows Server 2012: September 12, 2023 IMPORTANT Windows Server 2012 end of support EOS date is October 10, 2023. Extended Security Updates ESUs will be available for purchase no later than October 2022, but available for installation after the EOS date,...
September 12, 2023-Security Only Update for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 (KB5030173)
September 12, 2023-Security Only Update for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 KB5030173 Applies to: Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework...