Cinnamon's Kotaemon contains improper authorization checks in Kotaemon multi‑user chat handlers

Overview Cinnamon's Kotaemon all versions up to v0.12.0 multi‑user chat interface does not verify conversation ownership when loading a conversation. Any authenticated user can read, delete, rename, or overwrite another user’s conversation data by supplying the correct ID. This results in...

Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The XFree86-ISO8859-2-75dpi-fonts-4.3.0 package of the Red Hat Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remote...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the gnutls-guile-2.8.5 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xorg-x11-twm-6.8.2 package on the CentOS operating system can lead to violations of privacy, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the CentOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sudo-debuginfo-1.7.2p1 package in the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the net-snmp-libs-5.0.9 package for the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the pidgin-knotify package up to version 0.2.1 inclusive in the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

PT-2013-1045

Name of the Vulnerable Software and Affected Versions Samba versions prior to 4.1.2 Red Hat Enterprise Linux affected versions not specified CentOS affected versions not specified ALT Linux affected versions not specified Description The issue is related to the handling of invalid group names in...

PT-2013-1173

Name of the Vulnerable Software and Affected Versions GnuPG versions 1.4.x through 2.1.x Description The issue allows remote attackers to bypass intended cryptographic protection mechanisms by leveraging a subkey with all bits cleared in a key flags subpacket, which is treated as if all bits are...

PT-2013-1080

Name of the Vulnerable Software and Affected Versions hplip versions prior to 3.14.1 hplip-gui versions 3.12.4 hplip-common versions 3.12.4 hplip-debuginfo versions 3.12.4 hplip-libs versions 3.12.4 libsane-hpaio versions 3.12.4 hpijs versions 3.12.4 Description The issue is related to the check...

PT-2014-1880

Name of the Vulnerable Software and Affected Versions util-linux versions 2.14.1 through 2.17.2 util-linux versions prior to 2.22.2 Description The issue allows local users to determine the existence of restricted directories by using specific command-line options or attempting to mount...

PT-2013-1178

Name of the Vulnerable Software and Affected Versions FreeIPA versions prior to 3.1.2 ipa-client versions 2.1.3 through 2.2.0 ipa-server versions 2.2.0 ipa-python versions 2.2.0 ipa-admintools versions 2.2.0 ipa-server-selinux versions 2.2.0 ipa-debuginfo versions 2.2.0 Description The client in...

PT-2012-1057

Name of the Vulnerable Software and Affected Versions libgdata versions prior to 0.10.2 libgdata versions 0.11.x prior to 0.11.1 libgdata version 0.8.1-r2 and earlier Description The issue allows remote attackers to obtain user names and passwords via a man-in-the-middle MITM attack with a spoofe...

Re: Assurent VR - Oracle BEA WebLogic Server Apache Connector Buffer Overflow

Hello Assurent & Oracle, On Tue, 13 Jan 2009, [email protected] wrote: : Oracle BEA WebLogic Server Apache Connector Buffer Overflow : : Reference: http://www.bea.com/weblogic/server/ : : 2. Vulnerability Summary : : A remotely exploitable vulnerability has been discovered in t...