[SECURITY] Fedora 37 Update: insight-13.0.50.20220502-4.fc37

Insight is a tight graphical user interface to GDB written in Tcl/Tk. It provides a comprehensive interface that enables users to harness most of GDB's power. It's also probably the only up-to-date UI for the latest GDB version...

Fedora: Security Advisory for insight (FEDORA-2022-07d49bd9a8)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Design/Logic Flaw

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in libxrdpsendtochannel function. There are no known workarounds for this issue. Users are advised to upgrade...

CVE-2022-23483 Out-of-Bound Read in libxrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in libxrdpsendtochannel function. There are no known workarounds for this issue. Users are advised to upgrade...

CVE-2022-23480

CVE-2022-23480 affects the xrdp project, with a buffer overflow in the devredir_proc_client_devlist_announce_req() function present in older releases (before 0.9.21). Multiple connected sources confirm the issue in xrdp and indicate the vulnerability can impact remote-desktop exposure; Debian sec...

DEBIAN-CVE-2022-39334

Nextcloud also ships a CLI utility called nextcloudcmd which is sometimes used for automated scripting and headless servers. Versions of nextcloudcmd prior to 3.6.1 would incorrectly trust invalid TLS certificates, which may enable a Man-in-the-middle attack that exposes sensitive data or...

Mitsubishi Electric GOT2000 输入验证错误漏洞

Mitsubishi Electric GOT2000 is a GOT2000 Series graphical operator terminal from Mitsubishi Electric Japan. A security vulnerability exists in the Mitsubishi Electric GOT2000 Series that stems from an improper input validation vulnerability...

SAP GUI 代码注入漏洞

SAP GUI is an application of SAP, the graphical user interface of the SAP system. SAP GUI is vulnerable to operating system command injection, which results from the failure of the network system or product to properly filter special characters, commands, etc. during the execution of commands...

pki-core security update

11.0.6-1.0.1 - Replaced upstream graphical references Orabug: 33952704 11.0.6-1 - Bug 2107335 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE rhel-9.0.0.z...

The vulnerability of the graphical interface of FortiWeb web applications allows attackers to carry out cross-site scripting attacks.

The vulnerability of the graphical interface of FortiWeb web applications is related to the lack of protective measures taken during the creation of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Error: "File too large" when upload customized login schema xml file to ADC

1. When add login schema via ADC cli, below erro will prompt: 2. When add login schema via, below GUI error will show:...

CVE-2022-33919

Dell GeoDrive, versions 2.1 - 2.2, contains an information disclosure vulnerability in GUI. An authenticated non-admin user could potentially exploit this vulnerability and view sensitive information...

The vulnerability of the graphical interface of the software platform allows a hacker to gain access to the report templates managed by Fortinet FortiManager and FortiAnalyzer network devices.

The vulnerability of the graphical interface of the Fortinet FortiManager device management system and the FortiAnalyzer network monitoring system lies in the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow a malicious actor to gain access to the repo...

PT-2022-5022 · Fortinet · Fortimanager +1

Name of the Vulnerable Software and Affected Versions: FortiAnalyzer and FortiManager GUI versions 5.6.0 through 5.6.11 FortiAnalyzer and FortiManager GUI versions 6.0.0 through 6.0.11 FortiAnalyzer and FortiManager GUI versions 6.2.0 through 6.2.9 FortiAnalyzer and FortiManager GUI versions 6.4....

Velociraptor Version 0.6.6: Multi-Tenant Mode and More Let You Dig Deeper at Scale Like Never Before

Rapid7 is excited to announce the release of version 0.6.6 of Velociraptor – an advanced, open-source digital forensics and incident response DFIR tool that enhances visibility into your organization’s endpoints. After several months of development and testing, we are excited to share its powerfu...

Fedora: Security Advisory for librecad (FEDORA-2022-3dd3274ae2)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Cisco vManage 访问控制错误漏洞

Cisco vManage is a highly customizable dashboard from Cisco, Inc. that simplifies and automates the deployment, configuration, management, and operation of Cisco SD-WAN. Cisco vManage suffers from an Access Control Error vulnerability that stems from the GUI being accessible on a self-managed clo...

Security Bulletin: IBM SONAS fix available for Cross Frame Scripting vulnerability via Graphical User Interface (CVE-2013-5376)

Abstract An issue in IBM SONAS allows remote attackers to access the system as an authorized administrative user. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-5376 DESCRIPTION: An error in the IBM SONAS Graphical User Interface results in a Cross Frame Scripting vulnerability which can be used...

Security Bulletin: Storwize V7000 Unified Fix Available for Code Injection via Command Line Interface and Graphical User Interface (CVE-2012-2163)

Abstract Storwize V7000 Unified has a vulnerability that allows the administrative users to execute commands as root. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-2163 DESCRIPTION: An error in the command execution of the Storwize V7000 Unified Command Line Interface and the Graphical User...

Security Bulletin: SONAS Fix Available for Code Injection via Command Line Interface and SONAS Graphical User Interface (CVE-2012-2163)

Abstract SONAS has a vulnerability that allows SONAS administrative users to execute commands as root. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-2163 DESCRIPTION: An error in the command execution of the SONAS Command Line Interface and the SONAS Graphical User Interface could be leveraged ...