CVE-2023-38429 affecting package kernel for versions less than 5.15.122.1-2

CVE-2023-38429 affecting package kernel for versions less than 5.15.122.1-2. A patched version of the package is available...

CVE-2023-3863 affecting package kernel for versions less than 5.15.122.1-2

CVE-2023-3863 affecting package kernel for versions less than 5.15.122.1-2. A patched version of the package is available...

CVE-2022-20565

Removed by vendor...

CVE-2023-36808

GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.8, Computer Virtual Machine form and GLPI inventory request can be used to perform a SQL injection attack. Version 10.0.8 has a patch for this issue. As a workaround, one may disable native...

CVE-2023-34107

GLPI is a free asset and IT management software package. Versions of the software starting with 9.2.0 and prior to 10.0.8 have an incorrect rights check on a on a file accessible by an authenticated user, allows access to the view all KnowbaseItems. Version 10.0.8 has a patch for this issue...

CVE-2023-34106

GLPI is a free asset and IT management software package. Versions of the software starting with 0.68 and prior to 10.0.8 have an incorrect rights check on a on a file accessible by an authenticated user. This allows access to the list of all users and their personal information. Users should...

CVE-2023-34256 affecting package kernel for versions less than 5.15.116.1-1

CVE-2023-34256 affecting package kernel for versions less than 5.15.116.1-1. A patched version of the package is available...

CVE-2023-3128

Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app...

CVE-2023-34623

An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-33956

Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to an Insecure direct object reference IDOR vulnerability present in the application's URL parameter. This vulnerability enables any user to read files uploaded by any...

CVE-2023-33969

Kanboard is open source project management software that focuses on the Kanban methodology. A stored Cross site scripting XSS allows an attacker to execute arbitrary Javascript and any user who views the task containing the malicious code will be exposed to the XSS attack. Note: The default CSP...

CVE-2023-33970

Kanboard is open source project management software that focuses on the Kanban methodology. A vulnerability related to a missing access control was found, which allows a User with the lowest privileges to leak all the tasks and projects titles within the software, even if they are not invited or...

CVE-2023-1668 affecting package openvswitch for versions less than 2.17.5-2

CVE-2023-1668 affecting package openvswitch for versions less than 2.17.5-2. A patched version of the package is available...

freerdp: clients using `/parallel` command line switch might read uninitialized data

A vulnerability was found in FreeRDP where clients on UNIX systems using /parallel command line switch might read uninitialized data and send it to the client's server. The vulnerability allows a remote attacker to gain access to sensitive information...

CVE-2023-1855 affecting package kernel for versions less than 5.15.107.1-2

CVE-2023-1855 affecting package kernel for versions less than 5.15.107.1-2. A patched version of the package is available...

CVE-2022-4134

Removed by vendor...

CVE-2022-35883

NULL pointer dereference in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable denial of service via local access...

SUSE CVE-1999-0519

A NETBIOS/SMB share password is the default, null, or missing...

SUSE CVE-2006-4020

scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end of an array and triggers a buffer over-read...

SUSE CVE-2007-0071

Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file with a negative Scene Count value, which passes a signed comparison, is used as an offset of a NULL pointer, and triggers a buffer...