The vulnerability of the restoreSettings function in the Comments Like Dislike plugin of the WordPress content management system allows a hacker to compromise the integrity of the data.

The vulnerability of the restoreSettings function in the WordPress content management system’s comments and dislikes module is related to authentication errors. Exploiting this vulnerability could allow an attacker to compromise data integrity...

Rocky Linux 8 : libxml2 (RLSA-2023:4529)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:4529 advisory. - In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in...

PT-2023-5799 · Acronis · Acronis Cyber Protect 16 +2

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent versions prior to build 35895 Acronis Cyber Protect 16 versions prior to build 37391 Acronis Agent versions prior to build 35895 Description: The issue is related to errors in authorization, which may allow a...

The vulnerability of the HiviewTunner module of the HarmonyOS operating system allows a hacker to intercept legitimate traffic.

The vulnerability of the HiviewTunner module of the HarmonyOS operating system is related to authentication errors. Exploiting this vulnerability allows a remote attacker to intercept legitimate network traffic...

The vulnerability of the Node Role Label Handler component in the corporate platform’s application programming interface, Red Hat OpenShift Container Platform, allows a malicious individual to escalate their privileges.

The vulnerability of the Node Role Label Handler component in the corporate platform’s application programming interface of Red Hat OpenShift Container Platform is related to access control errors. Exploiting this vulnerability could allow a malicious actor to enhance their privileges by modifyin...

bouncycastle: potential blind LDAP injection attack using a self-signed certificate

A flaw was found in Bouncy Castle 1.73. This issue targets the fix of LDAP wild cards. Before the fix there was no validation for the X.500 name of any certificate, subject, or issuer, so the presence of a wild card may lead to information disclosure. This could allow a malicious user to obtain...

The vulnerability of the Security component in operating systems such as tvOS, iOS, iPadOS, watchOS, and macOS allows attackers to bypass signature checks.

The vulnerability of the Security component in operating systems such as tvOS, iOS, iPadOS, watchOS, and macOS is related to errors in the certificate validation process. Exploiting this vulnerability can allow attackers to bypass the signature verification...

The vulnerability of the libxpc library in operating systems such as iPadOS, tvOS, iOS, watchOS, and macOS allows attackers to delete arbitrary files.

The vulnerability of the libxpc library in iPadOS, tvOS, iOS, watchOS, and macOS is related to permission handling errors. Exploiting this vulnerability could allow an attacker to delete arbitrary files...

PT-2023-5791 · Acronis · Acronis Agent

Name of the Vulnerable Software and Affected Versions: Acronis Agent versions prior to build 35739 Description: The issue is related to errors in authorization, which may allow an attacker to gain unauthorized access to protected information. This is due to missing authorization, leading to...

The vulnerability of MediaTek’s microprogramming software lies in synchronization errors when using shared resources, allowing attackers to gain increased privileges.

The vulnerability of MediaTek’s microprogramming software lies in synchronization errors when using a common resource. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of MediaTek’s microprogramming software lies in synchronization errors when using shared resources, allowing attackers to gain increased privileges.

The vulnerability of MediaTek’s microprogramming software lies in synchronization errors when using a common resource. Exploiting this vulnerability can allow attackers to enhance their privileges...

Security Bulletin: A vulnerability in libcURL affect IBM Rational ClearCase.

Summary libcURL vulnerabilities were disclosed by the libcURL Project. libcURL is used by IBM Rational ClearCase. CVE-2023-23916 Vulnerability Details CVEID:CVE-2023-23916 DESCRIPTION: cURL libcurl is vulnerable to a denial of service, caused by a flaw in the decompression chain implementation. B...

The vulnerability of the kernel of the EMUI operating system of HarmonyOS allows attackers to compromise data privacy and integrity.

The vulnerability of the EMUI operating system of HarmonyOS is related to authentication errors. Exploiting this vulnerability could allow a remote attacker to compromise data confidentiality and integrity...

ARM Mali GPU Driver Resource Management Error Vulnerability

ARM Mali GPU Driver is an email driver from ARM UK. The ARM Mali GPU Driver suffers from a resource management error vulnerability that originates from a local, unprivileged user being able to perform incorrect GPU processing operations by exploiting a software race condition...

CVE-2023-3914 Incorrect User Management in GitLab

A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows access to internal projects. A service account is not deleted when a namespace is deleted, allowing access to internal projects...

CVE-2023-3914 Incorrect User Management in GitLab

A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows access to internal projects. A service account is not deleted when a namespace is deleted, allowing access to internal projects...

infinispan: circular reference on marshalling leads to DoS

A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service...

The vulnerability of the dumpHeap method in the Avalanche mobile device management system allows a hacker to escalate their privileges.

The vulnerability of the dumpHeap method in the Avalanche mobile device management system is related to errors during the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

CVE-2023-5184

Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers...

CVE-2023-5184 Potential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driver

Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers...