[SECURITY] Fedora 39 Update: perl-5.38.2-502.fc39

Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

CVE-2023-5188

The MMS Interpreter of WagoAppRTU in versions below 1.4.6.0 which is used by the WAGO Telecontrol Configurator is vulnerable to malformed packets. An remote unauthenticated attacker could send specifically crafted packets that lead to a denial-of-service condition until restart of the affected...

CVE-2023-5188

The MMS Interpreter of WagoAppRTU in versions below 1.4.6.0 which is used by the WAGO Telecontrol Configurator is vulnerable to malformed packets. An remote unauthenticated attacker could send specifically crafted packets that lead to a denial-of-service condition until restart of the affected...

Design/Logic Flaw

The MMS Interpreter of WagoAppRTU in versions below 1.4.6.0 which is used by the WAGO Telecontrol Configurator is vulnerable to malformed packets. An remote unauthenticated attacker could send specifically crafted packets that lead to a denial-of-service condition until restart of the affected...

CVE-2023-5188

CVE-2023-5188 concerns the MMS Interpreter of WagoAppRTU used by the WAGO Telecontrol Configurator. Affected: WAGO AppRTU MMS interpreter in versions below 1.4.6.0. Root cause: vulnerability to malformed packets that can be crafted remotely, allowing a remote, unauthenticated attacker to trigger ...

Wago RTU Input Validation Error Vulnerability

The WAGO RTU is a remote terminal unit from WAGO Germany for remotely monitored and controlled devices. An input validation error vulnerability exists in Wago RTU versions prior to 1.4.6.0. The vulnerability stems from the susceptibility of the WagoAppRTU MMS interpreter to incorrectly formatted...

CVE-2023-48863

SEMCMS 3.9 is vulnerable to SQL Injection. Due to the lack of security checks on the input of the application, the attacker uses the existing application to inject malicious SQL commands into the background database engine for execution, and sends some attack codes as commands or query statements...

The vulnerability of the njs_dump_is_recursive function (rc/njs_vmcode.c) in the njs interpreter of the nginx server allows a attacker to cause a service failure.

The vulnerability of the njsdumpisrecursive function rc/njsvmcode.c in the njs interpreter of the nginx server involves reading beyond the memory boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Vulnerability of the njs_lvlhsh_find function in the njs interpreter of the nginx server, allowing a hacker to cause a service failure

The vulnerability of the jsvmcodereturn function src/njsvmcode.c in the njs interpreter of the nginx server is related to reading beyond the memory boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the S_find_uninit_var function (sv.c) in the Perl interpreter allows a hacker to execute arbitrary code.

The vulnerability of the Sfinduninitvar function in sv.c of the Perl interpreter is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the njs_vmcode_return function (src/njs_vmcode.c) in the njs interpreter of the nginx server allows a hacker to cause a service failure.

The vulnerability of the njsvmcodereturn function src/njsvmcode.c in the njs interpreter of the nginx server is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the njs_function_frame function (src/njs_function.h) in the njs interpreter of the nginx server allows a hacker to cause a service failure.

The vulnerability of the njsfunctionframe function src/njsfunction.h in the njs interpreter of the nginx server is related to reading beyond the memory boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

When upgrading NetScaler getting error -bash: ./installns: /usr/bin/perl: bad interpreter

When upgrading NetScaler getting error ./installns: /usr/bin/perl: bad interpreter: No such file or directory...

Heap overflow

An heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime v.1.2.3 allows a remote attacker to cause a denial of service via the wasmloaderpreparebytecode function in core/iwasm/interpreter/wasmloader.c...

Oracle Linux 8 : ghostscript (ELSA-2023-7053)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7053 advisory. - fix for CVE-2023-4042 - fix for CVE-2023-38559 - fix for CVE-2023-28879 Tenable has extracted the preceding description block directly from the Oracl...

Liblisp Security Vulnerabilities

Liblisp is James personal developer of a lisp interpreter. The library can be written in c99. Liblisp has a security vulnerability that stems from a memory out-of-bounds read problem...

Liblisp Security Vulnerabilities

Liblisp is James personal developer of a lisp interpreter. The library can be written in c99. Liblisp has a security vulnerability that stems from a memory reuse after release problem...

Oracle Linux 9 : ghostscript (ELSA-2023-6544)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6544 advisory. - fix for CVE-2023-38559 - fix for CVE-2023-36664 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

ghostscript: buffer overflow in base/sbcp.c leading to data corruption

In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then...

RHEL 8 : ghostscript (RHSA-2023:7053)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7053 advisory. The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap...