1073 matches found
SUSE-SU-2024:1500-1 Security update for avahi
This update for avahi fixes the following issues: - CVE-2023-38472: Fixed denial of service due to a reachable assertion found in avahirdataparse bsc1216853 - CVE-2023-38470: Fixed denial of service due to a reachable assertion found in avahiescapelabel bsc1215947...
DSA-5679-1 less - security update
Bulletin has no description...
LINE client for iOS vulnerable to improper server certificate verification
Overview The financial module within LINE client for iOS lacks server certificate verification in log transmission CWE-295, CVE-2023-5554. LINE Corporation reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact The communication may be eavesdropped under a...
PT-2024-3704 · Omron · Cx-One +1
Name of the Vulnerable Software and Affected Versions: CX-One versions 4.61.1 and earlier Sysmac Studio versions 1.56 and earlier Description: The issue is related to the use of a function that frees a pointer not at the start of a buffer, which can be exploited to execute arbitrary code. This ca...
SUSE-SU-2024:1294-1 Security update for emacs
This update for emacs fixes the following issues: - CVE-2024-30203: Fixed treating inline MIME contents as trusted bsc1222053 - CVE-2024-30204: Fixed LaTeX preview enabled by default for e-mail attachments bsc1222052 - CVE-2024-30205: Fixed Org mode considering contents of remote files as trusted...
LoLLMs 安全漏洞
LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A security vulnerability exists in LoLLMs that stems from inadequate protection of sensitive endpoints, allowing unauthorized access to endpoints such as /restartprogram, /updatesoftware, /,...
DLA-3786-1 pillow - security update
Bulletin has no description...
DLA-3782-1 util-linux - security update
Bulletin has no description...
DLA-3781-1 libgd2 - security update
Bulletin has no description...
Floating Chat Widget < 3.1.9 - Editor+ Stored XSS
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup PoC 1. Go to "Chaty New Widget" 2...
a-blog cms vulnerable to directory traversal
Overview a-blog cms provided by appleple Inc. is a content management system CMS. a-blog cms contains a directory traversal vulnerability CWE-22. Kentaro Ishii of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Securi...
DLA-3752-1 libuv1 - security update
Bulletin has no description...
OpenPNE plugin "opTimelinePlugin" vulnerable to cross-site scripting
Overview OpenPNE plugin "opTimelinePlugin" provided by OpenPNE Project contains a stored cross-site scripting vulnerability CWE-79 in Edit Profile page. Kentaro Ishii of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...
DSA-5631-1 iwd - security update
Bulletin has no description...
DSA-5616-1 ruby-sanitize - security update
Bulletin has no description...
DSA-5615-1 runc - security update
Bulletin has no description...
Multiple vulnerabilities in a-blog cms
Overview a-blog cms provided by appleple inc. contains multiple vulnerabilities listed below. Improper input validation CWE-20 - CVE-2024-23180 Cross-site scripting CWE-79 - CVE-2024-23181 Relative path traversal CWE-23 - CVE-2024-23182 Cross-site scripting CWE-79 - CVE-2024-23183 Improper input...
DSA-5589-1 nodejs - security update
Bulletin has no description...