FreeBSD : Gitlab -- Vulnerabilities (92cd1c03-2940-11ef-bc02-001b217b3468)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 92cd1c03-2940-11ef-bc02-001b217b3468 advisory. Gitlab reports: ReDoS in gomod dependency linker ReDoS in CI interpolation fix bypass ReDoS in...

Gitlab -- Vulnerabilities

Gitlab reports: ReDoS in gomod dependency linker ReDoS in CI interpolation fix bypass ReDoS in Asana integration issue mapping when webhook is called XSS and content injection when viewing raw XHTML files on iOS devices Missing agentk request validation could cause KAS to panic...

UBUNTU-CVE-2023-52768

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: use vmmtable as array in wilc struct Enabling KASAN and running some iperf tests raises some memory issues with vmmtable: BUG: KASAN: slab-out-of-bounds in wilcwlanhandletxq+0x6ac/0xdb4 Write of size 4 at addr...

GHSA-RCJV-MGP8-QVMR vulnerabilities

Vulnerabilities for packages: kubernetes-fips, rancher-webhook, metrics-server-fips, caddy, rancher-webhook-fips, kubernetes, kube-oidc-proxy, up, k3s, prometheus-adapter, kubevela, buildkitd...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: kubernetes-fips, rancher-webhook, metrics-server-fips, caddy, rancher-webhook-fips, kubernetes, kube-oidc-proxy, up, k3s, prometheus-adapter, kubevela, buildkitd...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: caddy, kubernetes, k3s, kubevela, prometheus-adapter, up, buildkitd...

Kaspersky Anti-Spam未授权目录访问验证绕过漏洞

Kaspersky Anti-Spam是一款反垃圾邮件应用程序。 Kaspersky Anti-Spam的WEB配置接口存在设计问题，远程攻击者可以利用漏洞未授权访问部分目录文件信息。 目前没有详细漏洞细节提供。 Kaspersky Anti-Spam 3.0 MP1 可采用如下补丁： Kaspersky Anti-Spam 3.0 MP1 Cuyahoga kas-3-3.0.274-0.i386.rpm http://dnl-us4.kaspersky-labs.com/products/release/english/antispam/rp...