PT-2023-5963 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP versions prior to the fixed version affected versions not specified Description: A directory traversal vulnerability exists in the BIG-IP Configuration Utility that may allow an authenticated attacker to execute commands on the BIG-IP...

CVE-2023-41373: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability exists in the BIG-IP Configuration Utility that may allow an authenticated attacker to execute commands on the BIG-IP system. For BIG-IP system running in Appliance mode, a successful exploit can allow the attacker to cross a security boundary. Note: Software...

CVE-2023-40537: Insufficient Session Expiration

An authenticated user's session cookie may remain valid for a limited time after logging out from the BIG-IP Configuration utility on a multi-blade VIPRION platform. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Huawei EulerOS: Security Advisory for procps-ng (EulerOS-SA-2023-2905)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: traceroute-2.1.3-1.fc39

The traceroute utility displays the route used by IP packets on their way to a specified network or Internet host. Traceroute displays the IP number and host name if possible of the machines along the route taken by the packets. Traceroute is used as a network debugging tool. If you're having...

Security Bulletin: IBM Operational Decision Manager September 2023 - Multiple CVEs addressed

Summary IBM Operational Decision Manager is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2023-2253...

DEBIAN-CVE-2022-4245

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

Fedora: Security Advisory for golang-github-prometheus-exporter-toolkit (FEDORA-2023-1b25579262)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for golang-github-prometheus-exporter-toolkit (FEDORA-2023-c1318fb7f8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: golang-github-prometheus-exporter-toolkit-0.10.0-1.fc38

Utility package to build exporters...

[SECURITY] Fedora 37 Update: golang-github-prometheus-exporter-toolkit-0.10.0-1.fc37

Utility package to build exporters...

[SECURITY] Fedora 39 Update: golang-github-prometheus-exporter-toolkit-0.10.0-1.fc39

Utility package to build exporters...

CVE-2023-41929

A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a local attacker to escalate privileges. An attacker must already have user privileges on Windows to exploit this vulnerability...

CVE-2023-41929

A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a local attacker to escalate privileges. An attacker must already have user privileges on Windows to exploit this vulnerability...

CVE-2023-41929

CVE-2023-41929 is a DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software prior to version 1.0.1. It enables a local attacker with valid Windows user privileges to escalate privileges. The issue is caused by loading a malicious DLL before the legitimate one, ...

PT-2023-28166 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: Samsung Memory Card & UFD Authentication Utility PC Software versions prior to 1.0.1 Description: A DLL hijacking vulnerability could allow a local attacker to escalate privileges, given that the attacker already has user privileges on Window...

CVE-2023-41929: Uncontrolled Search Path Element

A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a local attacker to escalate privileges. An attacker must already have user privileges on Windows to exploit this vulnerability...

free_stream Memory Reclamation DoS

The vulnerability of the freestream function in the file conversion utility for files with the .fig and .fig2dev extensions is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2023-3039

SD ROM Utility, versions prior to 1.0.2.0 contain an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access...

CVE-2023-3039

SD ROM Utility, versions prior to 1.0.2.0 contain an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access...