17054 matches found
RHEL 8 : bind (RHSA-2023:7177)
"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7177 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named %NASLMINLEVEL...
CVE-2023-26514
Cross-Site Request Forgery CSRF vulnerability in WPGrim Dynamic XML Sitemaps Generator for Google plugin = 1.3.3 versions...
CVE-2023-26514
Cross-Site Request Forgery CSRF vulnerability in WPGrim Dynamic XML Sitemaps Generator for Google plugin = 1.3.3 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in WPGrim Dynamic XML Sitemaps Generator for Google plugin = 1.3.3 versions...
CVE-2023-26514
CVE-2023-26514 is a CSRF vulnerability in the WordPress plugin WPGrim Dynamic XML Sitemaps Generator for Google (versions
PT-2023-20693 Ā· WordPress Ā· Wpgrim Dynamic Xml Sitemaps Generator
Name of the Vulnerable Software and Affected Versions: WPGrim Dynamic XML Sitemaps Generator for Google plugin versions prior to 1.3.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing...
The vulnerability of the SetDynamicDNSSettings module in D-Link wireless router microprogramming software, such as DIR-882 and DIR-878, allows a hacker to execute arbitrary code.
The vulnerability of the SetDynamicDNSSettings module in D-Link wireless router microprogramming software, such as DIR-882 and DIR-878, is related to an issue with buffer overflows. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Important: Red Hat Bug Fix Advisory: LVMS 4.14.z Bug Fix and Enhancement update
Updated container images that fix multiple bugs are now available for LVMS 4.14.z. Logical volume manager storage LVMS uses the TopoLVM CSI driver to dynamically provision local storage on single node OpenShift clusters. Logical volume manager storage creates thin-provisioned volumes using the...
PT-2023-9174
Name of the Vulnerable Software and Affected Versions TP-Link Omada ER605 affected versions not specified Description The TP-Link Omada ER605 contains a stack-based buffer overflow flaw. This allows network-adjacent attackers to execute arbitrary code on affected devices. Authentication is not...
PT-2023-9171 Ā· Tp Link Ā· Tp-Link Omada Er605
Name of the Vulnerable Software and Affected Versions: TP-Link Omada ER605 versions affected versions not specified Description: The issue is caused by a heap-based buffer overflow in the TP-Link Omada ER605 router's firmware, specifically in the handling of Comexe DDNS responses. This allows a...
BleachBit Code Issue Vulnerability
BleachBit is a free open source disk space cleaner, privacy manager and computer system optimizer from BleachBit Open Source. A code issue vulnerability exists in BleachBit 4.4.2 and prior versions that stems from the presence of a dynamic link library DLL hijacking vulnerability...
kernel: ASoC: soc-compress: Reposition and add pcm_mutex
A locking issue was found in the ASoC ALSA SoC compressed audio subsystem in the Linux kernel. When DPCM Dynamic PCM compressed streams are started, several functions access resources without properly holding the card-pcmmutex lock. This triggers lock assertion warnings and can cause kernel panic...
kernel: eBPF: insufficient stack type checks in dynptr
An improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of proper validation of dynamic pointers within user-supplied eBPF programs prior to executing them. This may allow an attacker with CAPBPF privileges to escalate privileges and...
kernel: drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback
A function prototype mismatch was found in the AMD GPU driver's DPM table callbacks. When kCFI Control Flow Integrity is enabled, the mismatched types cause CFI validation failures, potentially crashing the kernel...
kernel: drm/amd/display: Do not set DRR on pipe Commit
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not set DRR on pipe Commit WHY Writing to DRR registers such as OTGVTOTALMIN on the same frame as a pipe commit can cause underflow...
Moderate: Red Hat Security Advisory: python3.9 security update
An update for python3.9 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
CVE-2022-48192
Cross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute a dynamic script JavaScript, VBScript in the context of the application...
Cross site scripting
Cross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute a dynamic script JavaScript, VBScript in the context of the application...
Intel Dynamic Tuning Technology Software August 2023 Security Update
Intel has informed HP of a potential security vulnerability in the IntelĀ® Dynamic Tuning Technology DTT software which may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerabilit...
CVE-2022-48192 Cross-site scripting vulnerability in Softing smartLink SW-HT
Cross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute a dynamic script JavaScript, VBScript in the context of the application...