libblockdev bug fix and enhancement update

An update is available for libblockdev. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux...

PT-2023-8537 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge SE2023 versions prior to V223.0 Update 10 Description: A vulnerability has been identified in the affected application, which is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. This could allow...

CVE-2023-5717 affecting package hyperv-daemons for versions less than 5.15.137.1-1

CVE-2023-5717 affecting package hyperv-daemons for versions less than 5.15.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-46853 affecting package memcached for versions less than 1.6.22-1

CVE-2023-46853 affecting package memcached for versions less than 1.6.22-1. An upgraded version of the package is available that resolves this issue...

.NET 6.0 security update

An update is available for dotnet6.0. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a managed-software framework. It implements a subset of the .NET...

Fedora 38 : godot (2023-59e4f4c9bb)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-59e4f4c9bb advisory. This updates provides Godot 4.1.2 as the latest stable release for this free and open source game engine. It fixes many bugs, improves features and usability...

Multiple vulnerabilities in JTEKT ELECTRONICS OnSinView2

Overview OnSinView2 provided by JTEKT ELECTRONICS CORPORATION contains multiple vulnerabilities listed below. Improper restriction of operations within the bounds of a memory buffer CWE-119 - CVE-2023-42506 Stack-based buffer overflow CWE-121 - CVE-2023-42507 Michael Heinzl reported these...

PT-2023-6166 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Windows TCP/IP protocol implementation. This can be exploited by a remote attacker to cause a denial of service. Recommendations...

PT-2023-36048 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the functions xmlDictLookupInternal, xmlDictLookup,...

CVE-2022-23527 affecting package mod_auth_openidc for versions less than 2.4.14.2-1

CVE-2022-23527 affecting package modauthopenidc for versions less than 2.4.14.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-24834 affecting package redis for versions less than 6.2.13-2

CVE-2022-24834 affecting package redis for versions less than 6.2.13-2. An upgraded version of the package is available that resolves this issue...

CVE-2022-3924 affecting package bind for versions less than 9.16.37-2

CVE-2022-3924 affecting package bind for versions less than 9.16.37-2. An upgraded version of the package is available that resolves this issue...

Security Bulletin: VMware Tanzu Spring Security is vulnerable to CVE-2023-34034 and CVE-2023-34035 used in IBM Maximo Application Suite - Monitor Component

Summary IBM Maximo Application Suite - Monitor Component uses VMware Tanzu Spring Security which is vulnerable to CVE-2023-34034 and CVE-2023-34035. The vulnerabilities in the product component have been addressed. Vulnerability Details CVEID:CVE-2023-34034 DESCRIPTION: VMware Tanzu Spring Securi...

Security Bulletin: Apache Commons FileUpload and Tomcat are vulnerable to CVE-2023-24998 is used by IBM Maximo Application Suite

Summary IBM Maximo Application Suite uses Apache Commons FileUpload and Tomcat packages vulnerable to CVE-2023-24998. Vulnerability Details CVEID:CVE-2023-24998 DESCRIPTION: Apache Commons FileUpload and Tomcat are vulnerable to a denial of service, caused by not limit the number of request parts...

PT-2023-4494 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 116.0.5845.110 Description: The issue is related to an out of bounds memory access in the Fonts component of Google Chrome, which can be exploited by a remote attacker. This can allow the attacker to perform an...

Multiple vulnerabilities in LuxCal Web Calendar

Overview LuxCal Web Calendar provided by LuxSoft contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2023-39543 SQL injection CWE-89 - CVE-2023-39939 Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated wit...

Intel® oneMKL Software Advisory 

Summary: Potential security vulnerabilities in some Intel® oneAPI Math Kernel Library oneMKL may allow ecsalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-25864 Description: Uncontrolled search path in so...

Intel® NUC Pro Software Suite Advisory

Summary: A potential security vulnerability in the Intel® NUC Pro Software Suite for Windows may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-28385 Description: Improper authorization in the...

CVE-2023-0425

ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported vulnerabilities in the product versions under maintenance. An attacker who successfully exploited one or more of these vulnerabilities could cause the product to stop or make th...

Stack overflow

ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported vulnerabilities in the product versions under maintenance. An attacker who successfully exploited one or more of these vulnerabilities could cause the product to stop or make th...