3609 matches found
RXSA-2023:0951 Important: kernel security and bug fix update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use-after-free caused by l2capreassemblesdu in net/bluetooth/l2capcore.c CVE-2022-3564 kernel: stack overflow in doprocdointvec and procskipspaces CVE-2022-4378 kernel: use-after-free in...
CVE-2022-3375
An issue has been discovered in GitLab affecting all versions starting from 11.10 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. It was possible to disclose the branch names when attacker has a fork of a project that was switched to...
SUSE-SU-2023:1739-1 Security update for pgadmin4
This update for pgadmin4 fixes the following issues: - CVE-2023-22298: Fixed an open redirect vulnerability bsc1207238...
CVE-2023-25885 ZDI-CAN-19480: Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Adobe Dimension versions 3.4.7 and earlier is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2022-38458
A cleartext transmission vulnerability exists in the Remote Management functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted man-in-the-middle attack can lead to a disclosure of sensitive information...
CVE-2023-26805
Tenda W20E v15.11.0.6 USW20EV4.0brv15.11.0.610681546841CNTDC is vulnerable to Buffer Overflow via function formIPMacBindModify...
MGASA-2023-0096 Updated perl-HTML-StripScripts packages fix security vulnerability
The HTML-StripScripts module through 1.06 for Perl allows hssattvalstyle ReDoS because of catastrophic backtracking for HTML content with certain style attributes. CVE-2023-24038...
CVE-2023-24920
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2023-24657
creationtimestamp| type| source ---|---|--- 2023-03-08 12:23:26+00:00| seen| https://t.me/cibsecurity/59661 2025-03-06 02:16:33+00:00| seen| Telegram/aVs8EmqnfCM8VQjnQB-Gh2RrZP0w1FU3fmMOgkZM8C2mkvi 2025-04-11 06:31:03+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lmjfgdyalj2g...
tributes.macarthuradvertiser.com.au Cross Site Scripting vulnerability OBB-3208287
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-48255
There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution...
CVE-2023-24384 WordPress Organization chart Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in WpDevArt Organization chart = 1.4.4 versions...
K44650639: Binutils vulnerability CVE-2019-9076
Security Advisory Description An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in elfreadnotes in elf.c. CVE-2019-9076 Impact There is no impact; F5 products are not affected by this...
K34102110: BIND vulnerability CVE-2021-25218
Security Advisory Description In BIND 9.16.19, 9.17.16. Also, version 9.16.19-S1 of BIND Supported Preview Edition When a vulnerable version of named receives a query under the circumstances described above, the named process will terminate due to a failed assertion check. The vulnerability affec...
CVE-2023-22228 Adobe Bridge Improper Input Validation Remote Code Execution Vulnerability
Adobe Bridge versions 12.0.3 and earlier and 13.0.1 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...
SUSE CVE-2017-9324
In Open Ticket Request System OTRS 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x through 5.0.19, an attacker with agent permission is capable of opening a specific URL in a browser to gain administrative privileges / full access. Afterward, all system settings can be read and changed. The URL...
SUSE CVE-2017-10078
Vulnerability in the Java SE component of Oracle Java SE subcomponent: Scripting. The supported version that is affected is Java SE: 8u131. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this...
SUSE CVE-2017-11530
The ReadEPTImage function in coders/ept.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service memory consumption via a crafted file...