Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

Mozilla has released security updates to address vulnerabilities in Firefox, Firefox ESR, and Thunderbird. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Mozilla security advisories for Firefox...

Citrix Releases Security Updates for Hypervisor

Citrix has released security updates to address vulnerabilities that could affect Hypervisor. An attacker could exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Citrix Security Update CTX460064 and apply the necessary...

Malicious code in feedback-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1651368f5cbd7d3898a7c2b3ae9f59b2f0ece0370a378798bc228ca2ca3abecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3001 Malicious code in feedback-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ce3047c466c30d8bf8684b6bedb5286b46a6addb1502e7f64e70afcac31131c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in feedback-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ce3047c466c30d8bf8684b6bedb5286b46a6addb1502e7f64e70afcac31131c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3002 Malicious code in feedback-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1651368f5cbd7d3898a7c2b3ae9f59b2f0ece0370a378798bc228ca2ca3abecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in feedback-web-renderer-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f48b26eebb7791e7260e8c048e98732a9b63de3e8850e6f8ad5a56bc11521f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3003 Malicious code in feedback-web-renderer-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f48b26eebb7791e7260e8c048e98732a9b63de3e8850e6f8ad5a56bc11521f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3820 Malicious code in ing-feat-feedback (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af0ba55ed8bd16ffac7912eaa04d915dbc2beb79653ece864f12502a3c7ef403 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SAP Releases June 2022 Security Updates

SAP has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review SAP Security Patch Day – June 2022 and apply the necessary...

The vulnerability of the implementation of the pjmedia_rtcp_fb_parse_rpsi() function in the multimedia communication library PJSIP allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the pjmediartcpfbparserpsi function in the multimedia communication library PJSIP is related to the escape of the operation out of the buffer during the processing of the incoming RPSI Reference Picture Selection Indication packet. Exploiting this vulnerability could allow a...

OPENSUSE-SU-2022:0156-1 Security update for opera

This update for opera fixes the following issues: Update to 87.0.4390.25: - CHR-8870 Update chromium on desktop-stable-101-4390 to 101.0.4951.64 - DNA-99209 Enable easy-files-multiupload on all streams - DNA-99325 Use a preference to set number of recent searches and recently closed in unfiltered...

Citrix Releases Security Updates for ADC and Gateway

Citrix has released security updates to address vulnerabilities in ADC and Gateway. An attacker could exploit these vulnerabilities to cause a denial-of-service condition. CISA encourages users and administrators to review Citrix Security Update CTX457048 and apply the necessary updates. This...

ISC Releases Security Advisory for BIND

The Internet Systems Consortium ISC has released a security advisory that addresses a vulnerability affecting version 9.18.0 of ISC Berkeley Internet Name Domain BIND. A remote attacker could exploit this vulnerability to cause a denial-of-service condition. CISA encourages users and administrato...

Moodle XSS Vulnerability

Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback...

GHSA-7MFW-G8X4-RQ2W Moodle XSS Vulnerability

Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback...

Out-of-Bounds Read And Write

pjproject is vulnerable to out-of-bounds read and write. An attacker is able to cause out-of-bounds read/write via pjmediartcpfbparserpsi function, when parsing incoming RTCP feedback RPSI Reference Picture Selection Indication packet...

GHSA-6P3G-HW27-QH44 Moodle's time-validation implementation allows bypassing intended restrictions

The time-validation implementation in 1 mod/feedback/complete.php and 2 mod/feedback/completeguest.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote authenticated users to bypass intended restrictions on starting a Feedback activity by...

Moodle does not set the RISK_XSS bit for graders

access.php in the Lesson module in Moodle 2.8.x before 2.8.2 does not set the RISKXSS bit for graders, which allows remote authenticated users to conduct cross-site scripting XSS attacks via crafted essay feedback...

GHSA-J4MR-VC54-H5PC Moodle cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in mod/feedback/mapcourse.php in the Feedback module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the mod/feedback:mapcourse...