Ubuntu 20.04 LTS : Firefox vulnerabilities (USN-6404-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6404-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially explo...

[SECURITY] [DLA 3599-1] exim4 security update

Debian LTS Advisory DLA-3599-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 02, 2023 https://wiki.debian.org/LTS Package : exim4 Version : 4.92-8+deb10u8 CVE ID : CVE-2023-42114 CVE-2023-42116 Several vulnerabilities were discovered in Exim, a mail...

Security Bulletin: Operations Dashboard is vulnerable to denial of service due to Netty

Summary Operations Dashboard is vulnerable to denial of service due to Netty CVE-2023-34462 with details below. Vulnerability Details CVEID:CVE-2023-34462 DESCRIPTION: Netty is vulnerable to a denial of service, caused by a flaw with allocating up to 16MB of heap for each channel during the TLS...

Debian dla-3594 : cups - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3594 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3594-1 [email protected]...

Debian dla-3598 : libvpx-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3598 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3598-1 [email protected]...

Debian dla-3597 : open-vm-tools - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3597 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3597-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3596 : firmware-adi - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3596 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3596-1 [email protected]...

Debian dla-3593 : gerbv - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3593 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3593-1 [email protected]...

Debian dla-3595 : trafficserver - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3595 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3595-1 [email protected]...

USN-6386-2: Linux kernel (Raspberry Pi) vulnerabilities

Jana Hofmann, Emanuele Vannacci, Cedric Fournet, Boris Kopf, and Oleksii Oleksenko discovered that some AMD processors could leak stale data from division operations in certain situations. A local attacker could possibly use this to expose sensitive information. CVE-2023-20588 It was discovered...

[SECURITY] [DLA 3587-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3587-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 29, 2023 https://wiki.debian.org/LTS -...

Debian dla-3588 : vim - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3588 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3588-1 [email protected]...

USN-6369-2: libwebp vulnerability

USN-6369-1 fixed a vulnerability in libwebp. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: It was discovered that libwebp incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted imag...

Debian dla-3584 : netatalk - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3584 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3584-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3586 : lib32ncurses-dev - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3586 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3586-1 [email protected] https://www.debian.org/lts/security/...

Design/Logic Flaw

MeterSphere is a one-stop open source continuous testing platform, covering functions such as test tracking, interface testing, UI testing and performance testing. The Selenium VNC config used in Metersphere is using a weak password by default, attackers can login to vnc and obtain high...

CVE-2023-41878 Weak password of selenium VNC in MeterSphere

MeterSphere is a one-stop open source continuous testing platform, covering functions such as test tracking, interface testing, UI testing and performance testing. The Selenium VNC config used in Metersphere is using a weak password by default, attackers can login to vnc and obtain high...

Elasticsearch 8.5.3 Stack Overflow Exploit

Exploit Author: TOUHAMI KASBAOUI Vendor Homepage: https://elastic.co/ Version: 8.5.3 / OpenSearch Tested on: Ubuntu 20.04 LTS CVE : CVE-2023-31419 Ref: https://github.com/sqrtZeroKnowledge/Elasticsearch-Exploit-CVE-2023-31419 import requests import random import string esurl =...

Debian dla-3585 : exempi - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3585 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3585-1 [email protected]...

Debian dla-3583 : libglib2.0-0 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3583 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3583-1 [email protected]...