Security Bulletin: A vulnerability in SciPy may affect IBM Robotic Process Automation for Cloud Pak and result in a denial of service. (CVE-2023-25399).

Summary There is a vulnerability in SciPy used by IBM Robotic Process Automation for Cloud Pak as part of Watson NLP, which may result in a denial of serviceCVE-20230-25399. This bulletin identifies the security fixes to apply to address this vulnerability. Vulnerability Details CVEID:...

PT-2023-30560 · First · Dvrs

Name of the Vulnerable Software and Affected Versions: First Corporation's DVRs affected versions not specified Description: A missing authentication for critical function issue allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device...

Drupal Releases Security Advisory to Address Vulnerability in Drupal Core

Drupal has released a security advisory to address a vulnerability affecting multiple Drupal versions. A malicious cyber actor could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review Drupal security advisory SA-CORE- 2023-006link ...

PT-2023-5473

Name of the Vulnerable Software and Affected Versions macOS Monterey versions 12.0 through 12.6 iOS versions prior to 16.7 iPadOS versions prior to 16.7 macOS Ventura versions prior to 13.6 watchOS versions prior to 9.6.3 watchOS versions prior to 10.0.1 OS versions prior to 17.0.1 iPadOS version...

PT-2023-5550 · Siemens · Tecnomatix Plant Simulation

Name of the Vulnerable Software and Affected Versions: Tecnomatix Plant Simulation versions prior to V2201.0008 Tecnomatix Plant Simulation versions prior to V2302.0002 Description: The issue is related to a memory corruption vulnerability that occurs when the application parses specially crafted...

ROS-2-2054

2.2054 Mozilla Firefox browser vulnerability CVE-2021-29970, CVE-2021-29976 1. Vulnerability description: CVE-2021-29970 A vulnerability in the Mozilla Firefox browser, is related to a release error in accessibility functions when processing HTML content. Exploitation of the vulnerability could...

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in several Office products. A malicious person could exploit the vulnerabilities to execute arbitrary code with the victim's privileges. The malicious party must trick the victim into opening a malicious file to open. The vulnerability in Sharepoint allows an...

PT-2022-27953

Name of the Vulnerable Software and Affected Versions: Apple macOS versions prior to 12.6.2 Apple macOS Big Sur versions prior to 11.7.2 Apple macOS Monterey versions prior to 12.6.2 Apple macOS Ventura versions prior to 13.1 Apple tvOS versions prior to 16.2 Apple iOS versions prior to 15.7.2...

PT-2022-6276 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 15.7.1 Apple iOS version 16.1 and earlier Apple iPadOS versions prior to 15.7.1 Apple iPadOS version 16.1 and earlier Description: The issue is related to an out-of-bounds write vulnerability that may allow an...

Vulnerability fixed in Microsoft System Center Operations Manager

Microsoft has fixed a vulnerability in System Center Operations Manager SCOM. The vulnerability allows a malicious remotely able to view files. The vulnerability is only exploitable on SCOM systems that have the web console installed. System Center:...

PT-2021-6426 · Oracle +1 · Mysql Cluster +1

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Cluster versions 7.4.34 and prior Oracle MySQL Cluster versions 7.5.24 and prior Oracle MySQL Cluster versions 7.6.20 and prior Oracle MySQL Cluster versions 8.0.27 and prior Description: The issue allows a high-privileged attack...

DEBIAN-CVE-2019-16780

WordPress users with lower privileges like contributors can inject JavaScript code in the block editor using a specific payload, which is executed within the dashboard. This can lead to XSS if an admin opens the post in the editor. Execution of this attack does require an authenticated user. This...

October 15, 2019—KB4519979 (OS Build 14393.3300)

None None...

PT-2010-1175 · Adobe · Acrobat +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 9.0.0 through 9.0.276.0 and 10.x through 10.1.53.63 Adobe AIR versions prior to 2.0.2.12610 Adobe Reader and Acrobat versions 8.x through 8.2.2 and 9.x through 9.3.2 Description: The issue allows remote attackers t...

DSA-536 libpng - several vulnerabilities

Bulletin has no description...

PT-1998-1008 · Isc · Bind

Name of the Vulnerable Software and Affected Versions: BIND versions 4.9 through 8 Description: The issue is related to Denial of Service vulnerabilities in BIND, which can be exploited via CNAME record and zone transfer. Recommendations: For BIND versions 4.9 through 8, update to a version that ...