Security Bulletin: IBM Storage Scale GUI may allow user to steal an active session (CVE-2023-38002)

Summary IBM Storage Scale GUI may allow an authenticated user to steal or manipulate an active session, fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2023-38002 DESCRIPTION: IBM Storage Scale could allow an authenticated user to steal or manipulate an active session to...

CVE-2023-3675

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Secomea GateManager Web GUI allows Reading Data from System Resources.This issue affects GateManager: from 11.0.623074018 before 11.0.623373051...

CVE-2023-3675

CVE-2023-3675 affects Secomea GateManager (Web GUI). The issue is a path traversal vulnerability in GateManager that allows reading data from system resources. Affected versions are 11.0.623074018 up to, but not including, 11.0.623373051. The Root Cause and Verified Impact are described as improp...

CVE-2023-3675 Insufficient input validation when downloading certain file types.

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Secomea GateManager Web GUI allows Reading Data from System Resources.This issue affects GateManager: from 11.0.623074018 before 11.0.623373051...

PT-2024-12585

Name of the Vulnerable Software and Affected Versions Secomea GateManager versions 11.0.623074018 through 11.0.623373051 Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', in the Web GUI of Secomea GateManager. This...

CVE-2023-3675: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Secomea GateManager Web GUI allows Reading Data from System Resources.This issue affects GateManager: from 11.0.623074018 before 11.0.623373051...

Error in retrieving SNMP Trap. Cannot read properties of undefined (reading 'trapdestination')

When trying to add SNMP trap from System-SNMP-Traps in GUI, the following error will display...

openSUSE Security Advisory (SUSE-SU-2024:1174-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-32023

Kohyass is a GUI for Kohya's Stable Diffusion trainers. Kohyass is vulnerable to a path injection in the commongui.py findandreplace function. This vulnerability is fixed in 23.1.5...

CVE-2024-32024

Kohyass is a GUI for Kohya's Stable Diffusion trainers. Kohyass is vulnerable to a path injection in the commongui.py addprepostfix function. This vulnerability is fixed in 23.1.5...

CVE-2024-32025

Kohyass is a GUI for Kohya's Stable Diffusion trainers. Kohyass is vulnerable to a command injection in groupimagesgui.py. This vulnerability is fixed in 23.1.5...

CVE-2024-32026

Kohyass is a GUI for Kohya's Stable Diffusion trainers. Kohyass is vulnerable to a command injection in gitcaptiongui.py. This vulnerability is fixed in 23.1.5...

CVE-2024-32027

Kohyass is a GUI for Kohya's Stable Diffusion trainers. Kohyass v22.6.1 is vulnerable to command injection in finetunegui.py This vulnerability is fixed in 23.1.5...

CVE-2024-32022

Kohyass is a GUI for Kohya's Stable Diffusion trainers. Kohyass is vulnerable to command injection in basiccaptiongui.py. This vulnerability is fixed in 23.1.5...

CVE-2024-32022

CVE-2024-32022 affects Kohya_ss (GUI for Kohya’s Stable Diffusion trainers). Concrete details across connected docs show a command injection vulnerability in basic_caption_gui.py, with affected versions reported as v22.6.1 through v23.1.3 (CNNVD) and general advisory context aligning with GHSL-20...

CVE-2024-32022 Kohya_ss is vulnerable to a command injection in basic_caption_gui.py (GHSL-2024-019)

Kohyass is a GUI for Kohya's Stable Diffusion trainers. Kohyass is vulnerable to command injection in basiccaptiongui.py. This vulnerability is fixed in 23.1.5...

CVE-2024-32022 Kohya_ss is vulnerable to a command injection in basic_caption_gui.py (GHSL-2024-019)

Kohyass is a GUI for Kohya's Stable Diffusion trainers. Kohyass is vulnerable to command injection in basiccaptiongui.py. This vulnerability is fixed in 23.1.5...

CVE-2024-32022 Kohya_ss is vulnerable to a command injection in basic_caption_gui.py (GHSL-2024-019)

Kohyass is a GUI for Kohya's Stable Diffusion trainers. Kohyass is vulnerable to command injection in basiccaptiongui.py. This vulnerability is fixed in 23.1.5...

CVE-2024-32027

CVE-2024-32027 affects Kohya_ss (a GUI for Kohya’s Stable Diffusion trainers). The vulnerability is a command injection in the file finetune_gui.py that affects version range around 22.6.1 up to 23.1.x (e.g., 23.1.3/23.1.4); multiple sources concur on the issue and its remediation. The fixed vers...

CVE-2024-32027 Kohya_ss is vulnerable to a command injection in `finetune_gui.py` (`GHSL-2024-022`)

Kohyass is a GUI for Kohya's Stable Diffusion trainers. Kohyass v22.6.1 is vulnerable to command injection in finetunegui.py This vulnerability is fixed in 23.1.5...