Enterprise Search 8.11.2 / 7.17.16 Security Update (ESA-2023-31)

Enterprise Search Insertion of Sensitive Information into Log File ESA-2023-31 An issue was discovered by Elastic whereby the Documents API of App Search logged the raw contents of indexed documents at INFO log level. Depending on the contents of such documents, this could lead to the insertion o...

lakeFS logs S3 credentials in plain text

Impact S3 credentials are logged in plain text S3Creds:Key:AKIAIOSFODNN7EXAMPLE Secret:wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY appears as part of the log message: time="2023-05-12T13:51:52Z" level=error msg="failed to perform diff" func="pkg/plugins/diff.Service.RunDiff"...

GHSA-4RGC-5G6R-2RJF lakeFS logs S3 credentials in plain text

Impact S3 credentials are logged in plain text S3Creds:Key:AKIAIOSFODNN7EXAMPLE Secret:wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY appears as part of the log message: time="2023-05-12T13:51:52Z" level=error msg="failed to perform diff" func="pkg/plugins/diff.Service.RunDiff"...

PT-2023-15289 · Siemens · Sinamics Sm120 +6

Name of the Vulnerable Software and Affected Versions: SIMATIC PC-Station Plus All versions SIMATIC S7-400 CPU 412-2 PN V7 All versions SIMATIC S7-400 CPU 414-3 PN/DP V7 All versions SIMATIC S7-400 CPU 414F-3 PN/DP V7 All versions SIMATIC S7-400 CPU 416-3 PN/DP V7 All versions SIMATIC S7-400 CPU...

PT-2023-31505 · H2O · H2O

Name of the Vulnerable Software and Affected Versions: h2o versions 2.3.0-beta and prior Description: The QUIC stack, as used by h2o, is susceptible to a state exhaustion attack. When h2o is serving HTTP/3, a remote attacker can exploit this vulnerability to progressively increase the memory...

JVN#34145838: Multiple denial-of-service (DoS) vulnerabilities in JTEKT ELECTRONICS HMI GC-A2 series

HMI GC-A2 series provided by JTEKT ELECTRONICS CORPORATION contains multiple denial-of-service DoS vulnerabilities listed below. Denial-of-service DoS vulnerability in FTP service CWE-400 - CVE-2023-41963 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H|...

PT-2023-31215 · Totolink · Totolink A7000R

Name of the Vulnerable Software and Affected Versions: TOTOLink A7000R version 9.1.0u.6115 B20201022 Description: The issue is a stack overflow vulnerability. It can be exploited via the setIpPortFilterRules function. Recommendations: For TOTOLink A7000R version 9.1.0u.6115 B20201022, as a...

PT-2023-9053

Name of the Vulnerable Software and Affected Versions json-path version 2.8.0 Description The issue is related to a stack overflow in the Criteria.parse method of the json-path library. This can potentially allow a remote attacker to cause a denial of service. Recommendations For json-path versio...

PT-2023-29751 · Floorsight · Floorsight Customer Portal Q3 2023

Name of the Vulnerable Software and Affected Versions: Floorsight Customer Portal Q3 2023 Description: An indirect Object Reference IDOR in the Order and Invoice pages allows an unauthenticated remote attacker to view sensitive customer information. Recommendations: As a temporary workaround,...

PT-2023-31555 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalCMS version 5.0.0 Description: The issue allows a remote attacker to read files via ../ Directory Traversal in the "/common/down/file" fileKey parameter. This could potentially lead to unauthorized access to sensitive information...

PT-2023-32723 · Linkding · Linkding

Name of the Vulnerable Software and Affected Versions: linkding version 1.23.0 Description: A vulnerability has been found in linkding, where the manipulation of the argument q leads to cross-site scripting. This issue can be exploited remotely. The vendor was contacted and responded...

Candid infinite decoding loop through specially crafted payload

Impact The Candid library causes a Denial of Service while parsing a specially crafted payload with empty data type. For example, if the payload is record ; empty and the canister interface expects record then the rust candid decoder treats empty as an extra field required by the type. The proble...

mockjs vulnerable to Prototype Pollution via the Util.extend function

All versions of the package mockjs are vulnerable to Prototype Pollution via the Util.extend function due to missing check if the attribute resolves to the object prototype. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, o...

CVE-2023-26158

The CVE-2023-26158 entries describe a Prototype Pollution vulnerability in mockjs via the Util.extend function. Affected are the Mock.js components that use extend (Util.extend, including Mock.Handler, Mock.Random, Mock.RE.Handler, and Mock.Util). The root cause is unsafe merging that can assign ...

PT-2023-30583 · Ibm · Ibm Api Connect

Name of the Vulnerable Software and Affected Versions: IBM API Connect versions 10.0.5.3 through 10.0.6.0 Description: The issue allows user credentials to be stored in the browser cache, which can be accessed by a local user. Recommendations: For versions 10.0.5.3 and 10.0.6.0, consider clearing...

PT-2023-9621

Name of the Vulnerable Software and Affected Versions CPython version 3.12.0 Description The issue is related to errors in privilege management in the subprocess module of the CPython interpreter. When using the extra groups= parameter with an empty list as a value, the logic regressed to not cal...

PT-2023-24812 · Arm +1 · Cortex-A77 +1

Name of the Vulnerable Software and Affected Versions: Cortex-A77 cores versions r0p0 and r1p0 Description: The issue arises when software, under certain circumstances, could deadlock a core due to the execution of either a load to device or non-cacheable memory, and either a store exclusive or...

PT-2023-31217 · Tenda · Tenda Ax12

Name of the Vulnerable Software and Affected Versions: Tenda AX12 version V22.03.01.46 Description: A stack overflow issue was discovered via the list parameter at the "/goform/SetVirtualServerCfg" API endpoint. Recommendations: For Tenda AX12 version V22.03.01.46, as a temporary workaround,...

PT-2023-9070 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 through 14.1.1.0.0 Description: The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via T3,...

PT-2023-8966 · Libheif +3 · Libheif +3

Name of the Vulnerable Software and Affected Versions: libheif version 1.17.5 Description: The issue is related to a segmentation error in the /libheif/exif.cc component of the libheif decoder and encoder for file formats. Exploitation of this issue could allow a remote attacker to impact the...