SUSE SLES15: ctdb / libsamba-policy-devel / libsamba-policy-python3-devel / etc (SUSE-SU-2023:4096-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4096-1 advisory. - CVE-2023-4091: Fixed a bug where a client can truncate file with read-only permissions. bsc1215904 - CVE-2023-42669: Fixed a bug ...

VMWare Aria Operations for Networks Authentication Bypass (CVE-2023-34039) (Direct Check)

Binary data vmwareariaoperationsfornetworkscve-2023-34039.nbin...

The vulnerability of the Adobe Bridge file manager arises from the possibility of writing operations beyond the buffer boundaries in memory, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of the Adobe Bridge file manager is related to the issue where operations are performed outside the buffer in memory when processing embedded fonts. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially...

VMSA-2023-0021:VMware Aria Operations for Logs updates address multiple vulnerabilities.

Advisory ID: VMSA-2023-0021 CVSSv3 Range: 8.1 Issue Date:2023-10-19 Updated On: 2023-10-23 CVEs: CVE-2023-34051, CVE-2023-34052 Synopsis: VMware Aria Operations for Logs updates address multiple vulnerabilities. CVE-2023-34051, CVE-2023-34052 RSS Feed Download PDF Download Text File Share this pa...

CVE-2023-45807

OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana following the license change in early 2021. There is an issue with the implementation of tenant permissions in OpenSearch Dashboards where authenticated users with read-only access to a tenant can perform create, edit...

OpenSearch Project Security Vulnerability

OpenSearch Project is OpenSearch Project open source a community-driven, Apache 2.0 licensed open source search and analytics suite. Making it easy to access, search, visualize and analyze data. A security vulnerability exists in OpenSearch. An attacker exploiting this vulnerability could perform...

SUSE SLED15: ctdb / ctdb-pcp-pmda / libsamba-policy-devel / etc (SUSE-SU-2023:4059-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4059-1 advisory. - CVE-2023-4091: Fixed a bug where a client can truncate file with read-only permissions...

Shopify: IDOR on GraphQL queries BillingDocumentDownload and BillDetails

A vulnerability allowed unauthorized access to billing invoice information for other merchants...

CVE-2023-5562 Unsafe default allows for cross-site scripting attacks in KNIME Server and KNIME Business Hub

An unsafe default configuration in KNIME Analytics Platform before 5.2.0 allows for a cross-site scripting attack. When KNIME Analytics Platform is used as an executor for either KNIME Server or KNIME Business Hub several JavaScript-based view nodes do not sanitize the data that is displayed by...

The vulnerability of the memory management block for IOMMU input/output operations in MediaTek’s microprogramming software allows a hacker to enhance their privileges.

The vulnerability of the memory management block for IOMMU input/output operations in MediaTek’s microprogramming software is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2023-44184: Improper Restriction of Operations within the Bounds of a Memory Buffer

An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the management daemon mgd process of Juniper Networks Junos OS and Junos OS Evolved allows a network-based authenticated low-privileged attacker, by executing a specific command via NETCONF, to cause a CPU...

The vulnerability of the application programming interface of the libcue library allows a hacker to execute arbitrary code.

The vulnerability of the libcue library’s application programming interface is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by loading the control panel from a malicious web page...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

The vulnerability of SiPass integrated software for security and access control systems arises from operations that go beyond the buffer in memory, allowing attackers to cause system failures.

The vulnerability of SiPass integrated software for security and access control systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Fortinet FortiOS Security Vulnerabilities

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam. A security vulnerabili...

VulnCheck KEV: CVE-2023-42657

In WSFTP Server versions prior to 8.7.4 and 8.8.2, a directory traversal vulnerability was discovered. An attacker could leverage this vulnerability to perform file operations delete, rename, rmdir, mkdir on files and folders outside of their authorized WSFTP folder path. Attackers could also...

The vulnerability of the pfn_swap_entry_to_page() function in the include/linux/swapops.h module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the pfnswapentrytopage function in the include/linux/swapops.h module of the Linux kernel is related to concurrent access to resources race condition. Exploiting this vulnerability could allow a attacker to cause a service failure...

Authentication Bypass

libopensc.so is vulnerable to Authentication Bypass. The vulnerability exists in the scpkcs15verifypin function of pkcs15-pin.c when a token or card is plugged into the system and authenticated by one process, but can be utilized for cryptographic operations by another process when an empty,...

CVE-2023-4211

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory...

Mozilla: Out-of-bounds write in PathOps

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: A compromised content process could have provided malicious data in a PathRecording, resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process...