AZL-31342 CVE-2023-44487 affecting package prometheus-adapter for versions less than 0.10.0-2

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

AZL-35117 CVE-2023-44487 affecting package prometheus-adapter for versions less than 0.10.0-2

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

@finsemble/finsemble-core (>=8.8.0-beta.1, <=8.9.9), @finsemble/finsemble-electron-adapter (>=8.8.0-beta.1, <=8.9.9) +7 more potentially affected by CVE-2023-5217 via electron (>=24.0.0, <=24.8.3)

electron NPM version =24.0.0, =8.8.0-beta.1, =8.8.0-beta.1, =4.1.5, =2.0.99, =0.0.31, =0.0.33 - reduxtron 0.0.1-alpha Source cves: CVE-2023-5217 Source advisory: OSV:GHSA-QQVQ-6XGJ-JW8G...

@finsemble/finsemble-core (8.10.0-beta.1), @finsemble/finsemble-electron-adapter (8.10.0-beta.1) +3 more potentially affected by CVE-2023-5217 via electron (>=26.0.0, <=26.2.2)

electron NPM version =26.0.0, =0.3.0, =1.0.0-canary.0, =2.0.106, =2.0.111 Source cves: CVE-2023-5217 Source advisory: OSV:GHSA-QQVQ-6XGJ-JW8G...

Oracle Linux 5 : ELSA-2012-1174-1: / kernel (ELSA-2012-11741)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-11741 advisory. - The rioioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows...

Oracle Linux 7 : qemu (ELSA-2020-5576)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5576 advisory. - iscsi: Cap block count from GET LBA STATUS CVE-2020-1711 Felipe Franciosi Orabug: 30807256 CVE-2020-1711 - scsi: lsi: exit infinite loop while...

@finsemble/finsemble-core (>=8.8.0-beta.1, <=8.9.9), @finsemble/finsemble-electron-adapter (>=8.8.0-beta.1, <=8.9.9) +6 more potentially affected by CVE-2023-39956 via electron (>=24.0.0, <=24.4.1)

electron NPM version =24.0.0, =8.8.0-beta.1, =8.8.0-beta.1, =4.1.5, =2.0.99, =0.0.31, =0.0.33 - reduxtron 0.0.1-alpha Source cves: CVE-2023-39956 Source advisory: OSV:GHSA-7X97-J373-85X5...

@finsemble/finsemble-core (>=1.0.0-beta-9, <=8.4.3), @finsemble/finsemble-electron-adapter (>=1.0.0-beta-9, <=8.4.3) +5 more potentially affected by CVE-2023-23623 via electron (22.0.0)

electron NPM version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - @finsemble/finsemble-core =1.0.0-beta-9, =1.0.0-beta-9, =0.0.1-alpha.2022-12-11.1670718306317, =1.3.0, =2.0.92, =2.0.94 Source cves:...

Citrix indirect display adapter is installed along with Workspace app in Win10

After installingCitrix Workspace 1809 or above version in Windows 10,Citrix indirect display adapter is installed automatically...

OracleVM 3.4 : kernel-uek (OVMSA-2023-0017)

The remote OracleVM system is missing necessary patches to address security updates: - A use-after-free flaw was found in the Linux kernel's Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a local user ...

CVE-2023-37364

In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution. This allows context-dependent attackers to read arbitrary files or cause a denial of service, a similar issue to CVE-2013-4152...

CVE-2023-37364

CVE-2023-37364 affects WS-Inc J WBEM Server, versions before 4.7.5. The CIM-XML protocol adapter fails to disable entity resolution, enabling context-dependent attackers to read arbitrary files or trigger a denial of service. This aligns with the issue described in the initial CVE entry and is co...

CVE-2023-37364

In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution. This allows context-dependent attackers to read arbitrary files or cause a denial of service, a similar issue to CVE-2013-4152...

AZL-35120 CVE-2023-3978 affecting package prometheus-adapter for versions less than 0.12.0-1

Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...

Software driver for D-Link Wi-Fi USB Adapter vulnerable to service path privilege escalation

Overview The software driver for D-Link DWA-117 AC600 MU-MIMO Wi-Fi USB Adapter contains a unquoted service path privilege escalation vulnerability. In certain conditions, this flaw can lead to a local privilege escalation. Description D-Link DWA-117 AC600 MU-MIMO is a Wi-Fi USB Adapter that...

CVE-2023-30661

Exposure of Sensitive Information vulnerability in getChipInfos in UwbAospAdapterService prior to SMR Jul-2023 Release 1 allows local attackers to access the UWB chipset Identifier...

CVE-2023-30660

The CVE-2023-30660 issue affects Samsung UwbAospAdapterService, with the vulnerable component being getDefaultChipId. It allows local attackers to access the UWB chipset Identifier on devices running versions prior to SMR Jul-2023 Release 1. According to PT-2023-22856, impact is exposure of sensi...

PT-2023-22856 · Unknown · Uwbaospadapterservice

Name of the Vulnerable Software and Affected Versions: UwbAospAdapterService versions prior to SMR Jul-2023 Release 1 Description: The issue allows local attackers to access the UWB chipset Identifier due to an Exposure of Sensitive Information vulnerability in the getDefaultChipId function. This...

PT-2023-22857 · Unknown · Uwbaospadapterservice

Name of the Vulnerable Software and Affected Versions: UwbAospAdapterService versions prior to SMR Jul-2023 Release 1 Description: The issue allows local attackers to access the UWB chipset Identifier due to an Exposure of Sensitive Information vulnerability in the getChipInfos function...

SAMSUNG Mobile device 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in the SAMSUNG Mobile device SMR Jul-2023 Release 1 version, which stems from the exposure of a sensitive information...