USN-7040-2: ConfigObj vulnerability

USN-7040-1 fixed a vulnerability in ConfigObj. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: It was discovered that ConfigObj contains regex that is susceptible to catastrophic backtracking. An attacker could possibly use this issue to cause a...

PT-2024-32024 · Openhis · Openhis

Name of the Vulnerable Software and Affected Versions: OpenHIS version 1.0 Description: A SQL Injection issue allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component. Users are urged to update to the latest release to mitigate risks...

UBUNTU-CVE-2024-41811

ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. CSRF. All affected products, in any version, will be unaffected by this once icinga-php-library is upgraded. Version...

PT-2024-18808 · Unknown · Dar Service

Name of the Vulnerable Software and Affected Versions: Dar service versions prior to SMR Jul-2024 Release 1 Description: The issue is related to improper access control in the Dar service, allowing local attackers to bypass restrictions for calling SDP features. Recommendations: For versions prio...

PT-2024-18774 · Snap · Snap

Name of the Vulnerable Software and Affected Versions: SNAP in HAL prior to SMR May-2024 Release 1 Description: The issue is an out of bounds write vulnerability that allows local privileged attackers to execute arbitrary code. Recommendations: For versions prior to SMR May-2024 Release 1, update...

Important: nodejs20

Issue Overview: NOTE: https://nodejs.org/en/blog/vulnerability/april-2024-security-releases/ CVE-2024-27982 An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2 frames inside. It is possible to leave some data i...

April 2, 2024, update for Excel 2016 (KB5002577)

None None...

PT-2024-18744 · Unknown · Libsubextractor.So

Name of the Vulnerable Software and Affected Versions: libsubextractor.so versions prior to SMR Mar-2024 Release 1 Description: The issue is an out of bounds read vulnerability in the ssmis get frm function within libsubextractor.so. This allows local attackers to read out of bounds memory...

Important Photon OS Security Update - PHSA-2024-5.0-90-0213

Updates of 'libuv' packages of Photon OS have been released...

Medium: nss

Issue Overview: It was discovered that the numerical library used in NSS for RSA cryptography leaks information whether high order bits of the RSA decryption result are zero. This information can be used to mount a Bleichenbacher or Manger like attack against all RSA decryption operations. As the...

java-17-openjdk security and bug fix update

1:17.0.9.0.9-2.0.1 - Update to jdk-17.0.9+9 GA - Update release notes to 17.0.9+9 - OpenJDK: memory corruption issue on x8664 with AVX-512 JDK-8317121 CVE-2023-22025 - OpenJDK: certificate path validation issue during client authentication JDK-8309966 CVE-2023-22081 - OpenJDK: Additional zip64...

Low: amazon-ssm-agent

Issue Overview: No CVE associated with this advisory Affected Packages: amazon-ssm-agent Issue Correction: Run dnf update amazon-ssm-agent --releasever 2023.1.20230906 or dnf update --advisory ALAS2023-2023-339 --releasever 2023.1.20230906 to update your system. More information on how to update...

ROS-2-2290

2.2290 Notification on the update of the Red OS OPERATION SYSTEM No RU.29926343.02.01-01-23 Due to quality improvement and bug fixing, an updated version of MIS Operating System "RED OS" 7.3 has been released. You can contact the technical support service within the framework of your existing...

HPESBHF04477 rev.1 - Certain HPE Synergy Servers Using Certain Intel Processors, INTEL-SA-00807, 2023.2 IPU - BIOS Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant BL460c Gen10 Server Blade - Prior to v2.8004-20-2023 HPE Synergy 480 Gen10 Compute Module - Prior to v2.8004-20-2023 HPE Synergy 660 Gen10 Compute Module - Prio...

JSA10470 - Pre-authentication CGI script fails to fully validate all parameters

Last Modified Date Aug 24, 2026 12:34:50 AM...

PT-2023-12392 · Qlik · Qlik Nprinting Designer

Name of the Vulnerable Software and Affected Versions: Qlik NPrinting Designer versions prior to 21.14.4.0 Description: The issue arises from Qlik NPrinting Designer creating a temporary file in a directory with insecure permissions. This could potentially allow unauthorized access or modificatio...

Vulnerabilities fixed in Apple iOS and iPadOS

Apple has fixed several vulnerabilities in iOS and iPadOS. A malicious party can exploit the vulnerabilities to obtain sensitive data, cause a Denial of Service or for executing arbitrary code, including in specific cases with system privileges. For the most serious damage, being code execution...

java-11-openjdk security and bug fix update

1:11.0.18.0.10-1 - Update to jdk-11.0.18+10 GA - Update release notes to 11.0.18+10 - Switch to GA mode for release - This tarball is embargoed until 2023-01-17 @ 1pm PT. - Related: rhbz2157797 1:11.0.18.0.9-0.2.ea - Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of...

January 3, 2023, update for Office 2016 (KB5002293)

None None...

Vulnerabilities fixed in Microsoft Edge

Vulnerabilities have been fixed in Microsoft Edge. These vulnerabilities allow a remote attacker to impersonate impersonate someone else or break outside the sandbox and thereby increase privileges. This requires a user to respond to a link from the attacker. Microsoft has made update version...