SUSE-SU-2023:4623-1 Security update for traceroute

This update for traceroute fixes the following issues: - CVE-2023-46316: wrapper scripts do not properly parse command lines bsc1216591...

[SECURITY] Fedora 39 Update: xen-4.17.2-5.fc39

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

JumpServer WEB CLI Arbitrary Command Execution

The vulnerability of the WEB CLI interface component koko of the JumpServer security audit and maintenance system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2023-37926

A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50W series firmware versions 4.16 through 5.37, USG20W-VPN series firmware versions 4.16 through 5.37, and VPN series firmware versions 4.30...

Zyxel ATP Security Vulnerability

Zyxel ATP is a firewall from Zyxel, China. Zyxel ATP series 4.32 to 5.37 firmware versions, USG FLEX series 4.50 to 5.37 firmware versions, USG FLEX 50W series 4.16 to 5.37 firmware versions, USG20W-VPN series 4.16 to 5.3 firmware versions, VPN series 4.30 to 5.37 firmware versions, NWA50AX...

Zyxel ATP Security Vulnerability

Zyxel ATP is a firewall from China Heqin Zyxel. A security vulnerability exists in Zyxel ATP that stems from the presence of a buffer overflow vulnerability that could allow an authenticated local attacker to cause a denial of service DoS via a crafted CLI command...

Fedora 38 : vim (2023-eec2cdb7ed)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-eec2cdb7ed advisory. The newest upstream commit Security fixes for CVE-2023-48233, CVE-2023-48231, CVE-2023-48232, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236,...

Fedora 37 : vim (2023-ce3f7d4818)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ce3f7d4818 advisory. The newest upstream commit Security fixes for CVE-2023-48233, CVE-2023-48231, CVE-2023-48232, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236,...

Slackware Linux 15.0 / current vim Multiple Vulnerabilities (SSA:2023-328-01)

The version of vim installed on the remote host is prior to 9.0.2127. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-328-01 advisory. - Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure...

FortiADC Automation Privilege Escalation

The vulnerability of the FortiADC application delivery controller’s automation function is related to access control errors. Exploiting this vulnerability allows a malicious actor to elevate their privileges to super-administrator level through a specially crafted automation CLI script...

Microsoft Azure CLI Access Credentials

The vulnerability of the Command Line Interface CLI of the Microsoft Azure platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain access to user credentials remotely...

The Citrix Workspace app cannot be reset via the command line

When installed by specifying an account Store URL from the command line, the Citrix Workspace app cannot be reset via the following command from the CLI. And the Delete button on the "Account-Edit" screen becomes inactive so that the account cannot be deleted. "C:\Program Files x86\Citrix\ICA...

CVE-2023-48236

A flaw was found in Vim, an open source command line text editor. When using the z= command, the user may overflow the count with values larger than MAXINT. The impact is low because user interaction is required and a crash may not happen in all situations. Mitigation Mitigation for this issue is...

CVE-2023-48234

A flaw was found in Vim, an open source command line text editor. When getting the count for a normal mode z command, it may overflow if large counts are given. The impact is low because user interaction is required and a crash may not happen in all situations. Mitigation Mitigation for this issu...

CVE-2023-48232

A flaw was found in Vim, an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines when smooth scrolling is enabled and the cpo-settings include the 'n' flag. This issue may occur when a window border is present and when the...

CVE-2023-48235

Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an overflow. Ironically this happens in the existing overflow check, because the line number becomes negative and LONGMAX - lnum will cause the overflow. Impact is low, user interactio...

CVE-2023-48236

Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values larger than MAXINT. Impact is low, user interaction is required and a crash may not even happen in all situations. This vulnerability has been addressed in commit 73b2d379 which...

CVE-2023-48234

Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for large counts given. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit 58f9befca1 which has...

CVE-2023-48234

Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for large counts given. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit 58f9befca1 which has...

CVE-2023-48233

Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a signed long variable, abort with evaluetoolarge. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit...