figueiropolisdoeste.mt.gov.br Cross Site Scripting vulnerability OBB-3198342

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GSD-2023-1001651 MIPS: vpe-mt: fix possible memory leak while module exiting

MIPS: vpe-mt: fix possible memory leak while module exiting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...

GSD-2023-1001511 MIPS: vpe-mt: fix possible memory leak while module exiting

MIPS: vpe-mt: fix possible memory leak while module exiting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001214 MIPS: vpe-mt: fix possible memory leak while module exiting

MIPS: vpe-mt: fix possible memory leak while module exiting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000842 MIPS: vpe-mt: fix possible memory leak while module exiting

MIPS: vpe-mt: fix possible memory leak while module exiting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

CVE-2022-29829

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 GOT2000 versions from 1.122C to 1.290C, Motion Control SettingGX Works3 related software versions from 1.035M to 1.042U, and MT Works2 versions from 1.100E to...

CVE-2022-29825

Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 GOT2000 versions from 1.122C to 1.290C, and MT Works2 versions from 1.100E to 1.200J allows an unauthenticated attacker to disclose sensitive information. As a result,...

CVE-2022-29825: Use of Hard-coded Password

Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 GOT2000 versions from 1.122C to 1.290C, and MT Works2 versions from 1.100E to 1.200J allows an unauthenticated attacker to disclose sensitive information. As a result,...

CVE-2022-29829: Use of Hard-coded Cryptographic Key

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 GOT2000 versions from 1.122C to 1.290C, Motion Control SettingGX Works3 related software versions from 1.035M to 1.042U, and MT Works2 versions from 1.100E to...

PowerCMS XMLRPC API vulnerable to command injection

Overview PowerCMS XMLRPC API provided by Alfasado Inc. contains a command injection vulnerability CWE-74. Sending a specially crafted message by POST method to PowerCMS XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. According to the...

mt-art.com Cross Site Scripting vulnerability OBB-2878025

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mt-solutions.bayern Cross Site Scripting vulnerability OBB-2834706

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mt-police777.com Cross Site Scripting vulnerability OBB-2770419

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a buffer error vulnerability that originates from incorrect input validation in the CCCI, which can be exploited by an attacker to escalate local privileges, and the following products and versio...

PT-2022-37065

Name of the Vulnerable Software and Affected Versions libvp9 affected versions not specified Description The issue is related to a heap buffer overflow error. Technical details about the error include a crash type of Heap-buffer-overflow WRITE and a crash state involving functions such as init mt...

Malicious code in mt-web-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c37b1bea403ec4d2eb17f26d9b0256569fa63d1831a5cbc89498a5fdaead5d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4730 Malicious code in mt-react-theme-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35438d73e685d2e77be34a77bee4fac7843dd594e2333f2c6e1034b9da1f2310 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mt-react-theme-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35438d73e685d2e77be34a77bee4fac7843dd594e2333f2c6e1034b9da1f2310 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-74 Malicious code in @amp-metrics/mt-metricskit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc1a6d0bd9e4b7b4550c88d71ee7fbf5710733f5d34a7e91a0625ae7f4ebf7f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

new packages: mt-st

An update is available for mt-st. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...