PT-2023-26248 · Fortanix +1 · Fortanix Enclaveos Confidential Computing Manager (Ccm) Platform +1

Name of the Vulnerable Software and Affected Versions: Fortanix EnclaveOS Confidential Computing Manager CCM Platform versions prior to 3.32 for Intel SGX Description: An issue was discovered in the Fortanix EnclaveOS Confidential Computing Manager CCM Platform, which relates to a lack of...

PT-2023-26250 · Intel · Intel Sgx

Name of the Vulnerable Software and Affected Versions: SCONE Confidential Computing Platform versions prior to 5.8.0 Description: An issue was discovered in the SCONE Confidential Computing Platform, where the lack of pointer-alignment logic in scone dispatch and other entry functions allows a...

UBUNTU-CVE-2023-4641

A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from...

CVE-2023-49880

In the Message Entry and Repair MER facility of IBM Financial Transaction Manager for SWIFT Services 3.2.4 the sending address and the message type of FIN messages are assumed to be immutable. However, an attacker might modify these elements of a business transaction. IBM X-Force ID: 273183...

CVE-2023-49880 IBM Financial Transaction Manager for SWIFT Services data manipulation

In the Message Entry and Repair MER facility of IBM Financial Transaction Manager for SWIFT Services 3.2.4 the sending address and the message type of FIN messages are assumed to be immutable. However, an attacker might modify these elements of a business transaction. IBM X-Force ID: 273183...

CVE-2023-42689

creationtimestamp| type| source ---|---|--- 2023-12-22 15:49:40+00:00| seen| https://t.me/ctinow/158447...

OESA-2023-1969 ncurses security update

The ncurses new curses library is a free software emulation of curses in System V Release 4.0 SVr4, and more. It uses terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SVr4-curses enhancements over BSD curses. SVr...

What is the maximum length of a log entry in var/log/ns.log

...

CVE-2023-23324

creationtimestamp| type| source ---|---|--- 2023-12-20 09:12:08+00:00| seen| https://t.me/ctinow/156817...

addRewardToken() does note remove old entries before adding new ones

Lines of code 455, 280, 378, 411 Vulnerability details Each time addRewardToken is called, new entries are added to the array, but doing so does not remove any old entries. By calling the function multiple times, an attacker can can increase their voting power indefinitely, without having to...

CVE-2023-6306

creationtimestamp| type| source ---|---|--- 2023-12-16 17:47:39+00:00| seen| https://t.me/ctinow/155442...

SUSE CVE-2023-50495

NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component ncwrapentry...

Malvertisers zoom in on cryptocurrencies and initial access

During the past month, we have observed an increase in the number of malicious ads on Google searches for "Zoom", the popular piece of video conferencing software. Threat actors have been alternating between different keywords for software downloads such as "Advanced IP Scanner" or "WinSCP"...

CVE-2023-27171

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

AZL-32177 CVE-2023-50495 affecting package ncurses for versions less than 6.4-3

NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component ncwrapentry...

UBUNTU-CVE-2023-50495

NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component ncwrapentry...

CVE-2023-6593

Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to execute entries in a SQL data source without restriction...

PT-2023-9404

Name of the Vulnerable Software and Affected Versions NCurse version 6.4-20230418 Description The issue is related to a segmentation fault in the nc wrap entry component of the ncurses library, which can be exploited to cause a denial of service. This can be achieved by a remote attacker. The...

PT-2023-28646 · Apple · Macos Monterey +6

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.7.5 iPadOS versions prior to 16.7.5 watchOS versions prior to 10.2 macOS Ventura versions prior to 13.6.4 macOS Sonoma versions prior to 14.2 macOS Monterey versions prior to 12.7.3 iOS versions prior to 17.2 iPadOS...

Improper access control

A vulnerability classified as critical has been found in Software AG WebMethods 10.11.x/10.15.x. Affected is an unknown function of the file wm.server/connect/. The manipulation leads to improper access controls. It is possible to launch the attack remotely. To access a file like /assets/ a popup...