SUSE SLES15: libprotobuf-lite20 / python2-cryptography / python2-psutil / etc (SUSE-SU-2023:2783-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2783-1 advisory. grpc: - Update in SLE-15 bsc1197726, bsc1144068 protobuf: - Fix a potential DoS issue in protobuf-cpp and protobuf-python, CVE-2022-1941,...

Mitigate Top 5 Common Cybersecurity Vulnerabilities

Cybersecurity vulnerabilities in software and infrastructure are a fact of life for developers and SREs. But when you understand vulnerabilities, you can minimize their impact. Learn more about five common threats and how to mitigate them...

Android Security Bulletin—July 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2023-07-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

CVE-2023-3313

An OS common injection vulnerability exists in the ESM certificate API, whereby incorrectly neutralized special elements may have allowed an unauthorized user to execute system command injection for the purpose of privilege escalation or to execute arbitrary commands...

PT-2023-24188 · Unknown · Esm Certificate Api

Name of the Vulnerable Software and Affected Versions: ESM certificate API affected versions not specified Description: An OS common injection vulnerability exists in the ESM certificate API. Incorrectly neutralized special elements may have allowed an unauthorized user to execute system command...

PT-2023-5919 · Atos Unify · Atos Unify Openscape Common Management Portal

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 Atos Unify OpenScape Common Management Portal V10 before V10 R5.1.0 Description: The vulnerability in the web interface of the Atos Unify OpenScape Common Management Platfor...

PT-2023-5918 · Atos · Atos Unify Openscape Common Management Portal

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 Description: The vulnerability in the web interface of the Atos Unify OpenScape Common Management Platform is related to insufficient protection of service...

CVE-2021-31982

creationtimestamp| type| source ---|---|--- 2023-07-01 07:15:50+00:00| seen| https://t.me/cibsecurity/65842...

jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name

It was found that Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows...

walkingoncommonground.org Cross Site Scripting vulnerability OBB-3476720

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

2023 CWE Top 25 Most Dangerous Software Weaknesses

The Homeland Security Systems Engineering and Development Institute, sponsored by the Department of Homeland Security and operated by MITRE, has released the 2023 Common Weakness Enumeration CWE Top 25 Most Dangerous Software Weaknesseslink is external. The CWE Top 25 is calculated by analyzing...

CVE-2023-21196

In btmblebatchscanfiltertrackadvvsecback of btmblebatchscan.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for...

CVE-2023-3407

creationtimestamp| type| source ---|---|--- 2023-06-28 07:12:34+00:00| seen| https://t.me/cibsecurity/65596...

ruby/cgi-gem: HTTP response splitting in CGI

A vulnerability was found in Ruby that allows HTTP header injection. A CGI application using the CGI library may insert untrusted input into the HTTP response header. This issue can allow an attacker to insert a newline character to split a header and inject malicious content to deceive clients...

CVE-2023-3113

An unauthenticated XML external entity injection XXE vulnerability exists in LXCA's Common Information Model CIM server that could result in read-only access to specific files...

Xxe

An unauthenticated XML external entity injection XXE vulnerability exists in LXCA's Common Information Model CIM server that could result in read-only access to specific files...

CVE-2022-48422

creationtimestamp| type| source ---|---|--- 2023-06-26 17:17:14+00:00| published-proof-of-concept| https://t.me/codebysec/7497 2025-02-27 16:26:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5706...

CVE-2023-29709

An issue was discovered in /cgi-bin/loginrj.cgi in Wildix WSG24POE version 103SP7D190822, allows attackers to bypass authentication...

CVE-2023-35810

creationtimestamp| type| source ---|---|--- 2023-06-18 02:24:07+00:00| seen| https://t.me/cibsecurity/65320...

Ubuntu 20.04 LTS : SSSD regression (USN-6156-2)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6156-2 advisory. USN-6156-1 fixed a vulnerability in SSSD. In certain environments, not all packages ended up being upgraded at the same time, resulting in authentication failures...