[SECURITY] [DLA 3519-1] ghostscript security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3519-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk August 07, 2023 https://wiki.debian.org/LTS -...

Advisory ROSA-SA-2023-2203

Software: python 2.7.5 OS: rosa-server79 packageevrstring: python-2.7.5-93.res7 CVE-ID: CVE-2023-24329 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A problem in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blacklisting methods by providing a URL that starts with empty...

Exploit for Heap-based Buffer Overflow in Redis

Improvement of CVE-2022-24834 public exploit Author Convi...

Cisco Nexus Devices NX-OS Software Command-Line Interpreter Local Privilege Escalation (CVE-2015-4232)

Cisco NX-OS 6.210 on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering crafted tar parameters in the CLI, aka Bug ID CSCus44856. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Cisco Nexus 7000 Devices Virtual Device Context Privilege Escalation (CVE-2015-4231)

The Python interpreter in Cisco NX-OS 6.28a on Nexus 7000 devices allows local users to bypass intended access restrictions and delete an arbitrary VDC's files by leveraging administrative privileges in one VDC, aka Bug ID CSCur08416. This plugin only works with Tenable.ot. Please visit...

The vulnerability of the Python programming language interpreter, related to uncontrolled resource consumption, allows attackers to trigger service failures.

The vulnerability of the Python programming language interpreter is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service failures...

CVE-2023-37271 RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape

RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment. RestrictedPython does not check access to stack frames and their attributes. Stack frames are accessible within at least generators and generat...

RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape

Impact RestrictedPython does not check access to stack frames and their attributes. Stack frames are accessible within at least generators and generator expressions, which are allowed inside RestrictedPython. An attacker with access to a RestrictedPython environment can write code that gets the...

GHSA-WQC8-X2PR-7JQH RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape

Impact RestrictedPython does not check access to stack frames and their attributes. Stack frames are accessible within at least generators and generator expressions, which are allowed inside RestrictedPython. An attacker with access to a RestrictedPython environment can write code that gets the...

USN-6213-1: Ghostscript vulnerability

It was discovered that Ghostscript incorrectly handled pipe devices. If a user or automated system were tricked into opening a specially crafted PDF file, a remote attacker could use this issue to execute arbitrary code...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2023-2311)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ccxvii mujs 资源管理错误漏洞

ccxvii mujs is an open source embeddable C language interpreter. A security vulnerability exists in MuJS versions prior to 1.1.2, which stems from the presence of a memory reuse after release issue that could lead to a system denial of service...

[SECURITY] [DSA 5446-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5446-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 03, 2023 https://www.debian.org/security/faq -...

Important: Red Hat Security Advisory: python3 security update

An update for python3 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as...

ALSA-2023:3811 Important: python39:3.9 and python39-devel:3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

The vulnerability of the Windows command-line interpreter allows a hacker to execute arbitrary code.

The vulnerability of the Windows command-line interpreter arises from the lack of mechanisms to stop the execution of a script after an error is detected in it. Exploiting this vulnerability allows an attacker to execute arbitrary code by creating images using the built-in graphics editor MS Pain...

python27:2.7 security update

An update is available for module.python-jinja2, numpy, module.python-backports, module.python-setuptoolsscm, python-funcsigs, python-backports, python-PyMySQL, python-backports-sslmatchhostname, module.python2-setuptools, module.python-py, module.python2-six, module.python-markupsafe, module.pyt...

ALSA-2023:3781 Important: python38:3.8 and python38-devel:3.8 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

ALSA-2023:3780 Important: python27:2.7 security update

Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for...

USN-6181-1: Ruby vulnerabilities

Hiroshi Tokumaru discovered that Ruby did not properly handle certain user input for applications the generate HTTP responses using cgi gem. An attacker could possibly use this issue to maliciously modify the response a user would receive from a vulnerable application. This issue only affected...