Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

CVE-2022-48150

Shopware v5.5.10 was discovered to contain a cross-site scripting XSS vulnerability via the recovery/install/ URI...

CVE-2022-48150

Shopware v5.5.10 was discovered to contain a cross-site scripting XSS vulnerability via the recovery/install/ URI...

CVE-2022-48150: Improper Neutralization of Input During Web Page Generation

Shopware v5.5.10 was discovered to contain a cross-site scripting XSS vulnerability via the recovery/install/ URI...

Shopware cross-site scripting vulnerabilities

Shopware is a set of open source e-commerce software from German Shopware company . A security vulnerability exists in Shopware v5.5.10, which can be exploited by an attacker to conduct cross-site scripting XSS attacks via URI recovery/install/...

CVE-2021-38363

An issue was discovered in ONOS 2.5.1. In IntentManager, the install-requested intent which causes an exception remains in pendingMap in memory forever. Deletion is possible neither by a user nor by the intermittent Intent Cleanup process...

KLA49015 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Out of bounds memory access vulnerability in Service Worker API can be exploited to cause...

CVE-2021-38363: Improper Handling of Exceptional Conditions

An issue was discovered in ONOS 2.5.1. In IntentManager, the install-requested intent which causes an exception remains in pendingMap in memory forever. Deletion is possible neither by a user nor by the intermittent Intent Cleanup process...

KLA48976 ACE vulnerability in Microsoft Browser

Integer overflow vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories CVE-2023-2136 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Edge CVE list...

CVE-2023-25547

A CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution on upload and install packages when a hacker is using a low privileged user account. Affected products: StruxureWare Data Center Expert V7.9.2 and prior...

CVE-2023-25547

A CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution on upload and install packages when a hacker is using a low privileged user account. Affected products: StruxureWare Data Center Expert V7.9.2 and prior...

CVE-2023-25547

A CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution on upload and install packages when a hacker is using a low privileged user account. Affected products: StruxureWare Data Center Expert V7.9.2 and prior...

CVE-2023-29855

WBCE CMS 1.5.3 has a command execution vulnerability via admin/languages/install.php...

PT-2023-21590 · Qualys · Qualys Cloud Agent For Windows

Name of the Vulnerable Software and Affected Versions: Qualys Cloud Agent for Windows versions prior to 4.8.0.31 Description: An NTFS Junction condition exists in the Qualys Cloud Agent for Windows platform. Attackers may write files to arbitrary locations via a local attack vector, allowing them...

PT-2023-22448 · Wbce Cms · Wbce Cms

Name of the Vulnerable Software and Affected Versions: WBCE CMS version 1.5.3 Description: The issue is a command execution vulnerability. It can be exploited via the admin/languages/install.php endpoint. Recommendations: For WBCE CMS version 1.5.3, consider disabling access to the...

WBCE CMS Command Injection Vulnerability

WBCE CMS is an open source content management system CMS based on PHP and MySQL. A security vulnerability exists in WBCE CMS version 1.5.3, which originates from a poorly filtered parameter in the admin/languages/install.phpInstall Language module, resulting in command execution...

PT-2023-22195 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to the latest tests-passed, beta and stable branches Description: This issue affects Discourse, an open source platform for community discussion. It is not exploitable on the default install of Discourse, requiring a...

CVE-2023-25547: Incorrect Authorization

A CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution on upload and install packages when a hacker is using a low privileged user account. Affected products: StruxureWare Data Center Expert V7.9.2 and prior...

Fedora: Security Advisory for golang (FEDORA-2023-ab5f0c32da)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KLA48961 DoS vulnerability in Microsoft Browser

Type confusion vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2023-2033 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware is...