SUSE-SU-2022:1723-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2020-27778: Fixed a buffer overflow in pdftohtml bsc1179163. - CVE-2019-14494: Fixed a divide-by-zero error in pdftoppm bsc1143950. - CVE-2019-9959: Fixed an integer overflow in pdftocairo bsc1142465. - CVE-2019-10871: Fixed an invalid...

CVE-2022-29422

Multiple Authenticated admin+ Persistent Cross-Site Scripting XSS vulnerabilities in Adam Skaat's Countdown & Clock plugin = 2.3.2 at WordPress via &ycd-countdown-width, &ycd-progress-height, &ycd-progress-width, &ycd-button-margin-top, &ycd-button-margin-right, &ycd-button-margin-bottom,...

SUSE-SU-2022:1478-1 Security update for mutt

This update for mutt fixes the following issues: - CVE-2022-1328: Fixed an invalid memory access when reading untrusted uuencoded data. This could result in including private memory in replies bsc1198518...

SUSE-SU-2022:1316-1 Security update for podofo

This update for podofo fixes the following issues: - CVE-2019-20093: Fixed an invalid memory access that could cause an application crash bsc1159921...

Cannot start app **** - Issue when Storefront STA's configure as https.

Issue accessing the url of storefront store through Citrix ADC. Users are able to access storefront, but when users try to open any application it gives an error: Cannot start app However, when accessing the storefront url internally using store URL, all the applications open without problems,...

Liferay Portal and Liferay DXP fails to check permissions to view sites/groups

Liferay Portal 7.3.7, 7.4.0, and 7.4.1, and Liferay DXP 7.2 fix pack 13, and 7.3 fix pack 2 does not properly check user permission when accessing a list of sites/groups, which allows remote authenticated users to view sites/groups via the user's site membership assignment UI...

SAP S/4HANA DMIS Mobile Plug-In SQL Injection

The vulnerability of the SAP S/4HANA software platform and the DMIS Mobile Plug-In import control server is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

OPENSUSE-SU-2022:0944-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2021-36976: Fixed an invalid memory access that could cause data corruption bsc1188572. Non-security updates: - Updated references for CVE-2017-5601, which was already fixed in a previous version bsc1022528 bsc1189528...

SUSE-SU-2022:0906-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Updated to version 91.7 bsc1196900: - CVE-2022-26381: Fixed an invalid memory access due to text reflow when SVG objects were present. - CVE-2022-26383: Fixed an issue where, when resizing a popup after requesting fullscreen access, t...

CVE-2022-22670

An access issue was addressed with improved access restrictions. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, watchOS 8.5. A malicious application may be able to identify what other applications a user has installed...

CVE-2022-22670

An access issue was addressed with improved access restrictions. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, watchOS 8.5. A malicious application may be able to identify what other applications a user has installed...

CVE-2022-22670

An access issue was addressed with improved access restrictions. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, watchOS 8.5. A malicious application may be able to identify what other applications a user has installed...

CVE-2022-22670

CVE-2022-22670 in Apple's MediaRemote module affects tvOS 15.4, iOS 15.4, iPadOS 15.4, and watchOS 8.5. The issue is described as an access control restriction problem that could allow a malicious app to identify which other applications a user has installed. Public details in the connected docs ...

Gateway 12.1 55.247- after reboot/restart the Gateway is not working need to Enable/Disabled MBF for get access to the Gateway page

After ADC reboot/restart Customer unable to access Citrix Gateway page. Customer had to toggle MBF mode on ADC for restore access to Citrix Gateway Page...

PT-2022-15619

Name of the Vulnerable Software and Affected Versions Apple tvOS versions prior to 15.4 Apple iOS versions prior to 15.4 Apple iPadOS versions prior to 15.4 Apple watchOS versions prior to 8.5 Description An access issue was addressed with improved access restrictions. A malicious application may...

CVE-2022-24979

An issue was discovered in the Varnishcache extension before 2.0.1 for TYPO3. The Edge Site Includes ESI content element renderer component does not include an access check. This allows an unauthenticated user to render various content elements, resulting in insecure direct object reference IDOR,...

CVE-2017-13910

An access issue was addressed with additional sandbox restrictions on applications. This issue is fixed in macOS High Sierra 10.13. An application may be able to access restricted files...

Authentication flaw

An access issue was addressed with additional sandbox restrictions on applications. This issue is fixed in macOS High Sierra 10.13. An application may be able to access restricted files...

CVE-2017-13910

CVE-2017-13910 concerns macOS High Sierra 10.13. Apple fixed an access issue where an application may have been able to access restricted files by adding sandbox restrictions on applications. Affected product: macOS High Sierra; issue is described as an access control/sandboxing problem, mitigate...

CVE-2017-13910

An access issue was addressed with additional sandbox restrictions on applications. This issue is fixed in macOS High Sierra 10.13. An application may be able to access restricted files...