Lucene search
K

2544 matches found

OSV
OSV
added 2023/11/09 2:33 a.m.2 views

SUSE-SU-2023:4387-1 Security update for salt

This update for salt fixes the following issues: Security issues fixed: - CVE-2023-34049: arbitrary code execution via symlink attack bsc1215157 Bugs fixed: - Fix optimizationorder opt to prevent testsuite fails - Improve salt.utils.json.findjson to avoid fails bsc1213293 - Use salt-call from sal...

6.7CVSS6.9AI score0.0006EPSS
Exploits0References6
OSV
OSV
added 2023/11/09 2:33 a.m.2 views

SUSE-SU-2023:4386-1 Security update for salt

This update for salt fixes the following issues: Security issues fixed: - CVE-2023-34049: arbitrary code execution via symlink attack bsc1215157 Bugs fixed: - Fix optimizationorder opt to prevent testsuite fails - Improve salt.utils.json.findjson to avoid fails bsc1213293 - Use salt-call from sal...

6.7CVSS6.9AI score0.0006EPSS
Exploits0References6
CNNVD
CNNVD
added 2023/11/09 12:0 a.m.3 views

WordPress Plugin ShortPixel Adaptive Images - WebP, AVIF, CDN, Image Optimization Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin ShortPixel...

8.8CVSS6.7AI score0.0007EPSS
Exploits0References2
Fedora
Fedora
added 2023/11/03 6:54 p.m.14 views

[SECURITY] Fedora 39 Update: llvm-bolt-17.0.2-1.fc39

BOLT is a post-link optimizer developed to speed up large applications. It achieves the improvements by optimizing application's code layout based on execution profile gathered by sampling profiler, such as Linux perf tool...

5.5CVSS5.6AI score0.00137EPSS
Exploits0
Fedora
Fedora
added 2023/11/03 6:54 p.m.17 views

[SECURITY] Fedora 39 Update: llvm-17.0.2-1.fc39

LLVM is a compiler infrastructure designed for compile-time, link-time, runtime, and idle-time optimization of programs from arbitrary programming languages. The compiler infrastructure includes mirror sets of programming tools as well as libraries with equivalent functionality...

5.5CVSS7.4AI score0.00137EPSS
Exploits0
OpenVAS
OpenVAS
added 2023/11/01 12:0 a.m.15 views

SUSE: Security Advisory (SUSE-SU-2023:4287-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.8CVSS6.7AI score0.00185EPSS
Exploits1References13
Patchstack
Patchstack
added 2023/10/29 12:0 a.m.6 views

WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer Plugin <= 2.24.14 is vulnerable to Settings Change

Software 10Web Booster – Website speed optimization, Cache & Page Speed optimizer Type Plugin Vulnerable versions = 2.24.14 Fixed in 2.24.18 OWASP Top 10 A3: Injection Classification Settings Change CVE N/A Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 75375faf9c46...

7.2AI score
Exploits0References2Affected Software1
The Hacker News
The Hacker News
added 2023/10/26 4:49 p.m.62 views

iLeakage: New Safari Exploit Impacts Apple iPhones and Macs with A- and M-Series CPUs

A group of academics has devised a novel side-channel attack dubbed iLeakage that exploits a weakness in the A- and M-series CPUs running on Apple iOS, iPadOS, and macOS devices, enabling the extraction of sensitive information from the Safari web browser. "An attacker can induce Safari to render...

6.5CVSS6.7AI score0.02081EPSS
Exploits2
Malwarebytes
Malwarebytes
added 2023/10/26 5:52 a.m.12 views

Patch&#8230;later? Safari iLeakage bug not fixed

Apple has released updates for its phones, Macs, iPads, watches, and TV streaming devices, fixing a bunch of security problems. But amid all that activity, one fix is notably absent—there is nothing to address the vulnerability dubbed iLeakage. iLeakage is a side-channel attack that can force the...

6.8AI score
Exploits0
Wallarm Lab
Wallarm Lab
added 2023/10/20 3:13 p.m.15 views

What is Cloud Migration ?

Dispelling the Fog: Unraveling Cloud Migration In the technological realm, cloud migration is a burgeoning trend that's swiftly taking center stage. However, its definite meaning may not be crystal clear to all. Simply put, cloud migration is the process where essential business constituents such...

7.2AI score
Exploits0
Wallarm Lab
Wallarm Lab
added 2023/10/16 4:28 p.m.12 views

What is WAN Acceleration?

Hook: Network Sluggish? Learn What WAN Acceleration Is Ever been in a virtual meeting that froze at the worst possible moment? Or had your staff grumble about slow data transfers that are as slow as molasses? If your answer is a weary "yes," it's high time to turn your eyes toward WAN Acceleratio...

7.6AI score
Exploits0
HackRead
HackRead
added 2023/10/12 12:10 p.m.26 views

The Ultimate Guide to Price Optimization

By Owais Sultan Price optimization transcends the domain of business buzzwords; it emerges as a foundational strategy that possesses the potential… This is a post from HackRead.com Read the original post: The Ultimate Guide to Price Optimization...

6.9AI score
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2023/10/11 5:53 a.m.43 views

Security Bulletin: An issue was discovered in netplex json-smart which affects IBM Engineering Lifecycle Optimization - Publishing

Summary An issue was discovered in netplex json-smart which affect affect IBM Engineering Lifecycle Optimization - Publishing. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2021-27568 DESCRIPTION: Netplex json-smart-v1 and json-smart-v2 are vulnerable to a denial of servic...

7.5CVSS6.8AI score0.00698EPSS
Exploits2Affected Software1
CNVD
CNVD
added 2023/10/11 12:0 a.m.28 views

Siemens Tecnomatix Plant Simulation Out-of-Bounds Write Vulnerability (CNVD-2023-75586)

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. Using the function of discrete event simulation for production volume analysis and optimization, and thus improve the manufacturing system performance. An out-of-bounds write vulnerability exists in Siemens...

7.8CVSS7.4AI score0.0014EPSS
Exploits0References1
CNVD
CNVD
added 2023/10/11 12:0 a.m.10 views

Siemens Tecnomatix Plant Simulation Out-of-Bounds Read Vulnerability (CNVD-2023-75583)

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. Using the function of discrete event simulation for production volume analysis and optimization, and thus improve the manufacturing system performance. Siemens Tecnomatix Plant Simulation suffers from an...

7.8CVSS7.1AI score0.00166EPSS
Exploits0References1
CNVD
CNVD
added 2023/10/11 12:0 a.m.27 views

Siemens Tecnomatix Plant Simulation File Analysis Vulnerability

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. Using the function of discrete event simulation for production volume analysis and optimization, and thus improve the manufacturing system performance. A file analysis vulnerability exists in Siemens...

7.8CVSS7.1AI score0.00166EPSS
Exploits0References1
CNVD
CNVD
added 2023/10/11 12:0 a.m.17 views

Siemens Tecnomatix Plant Simulation Out-of-Bounds Read Vulnerability (CNVD-2023-75581)

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. Using the function of discrete event simulation for production volume analysis and optimization, and thus improve the manufacturing system performance. Siemens Tecnomatix Plant Simulation suffers from an...

7.8CVSS7.1AI score0.00166EPSS
Exploits0References1
CNVD
CNVD
added 2023/10/11 12:0 a.m.13 views

Siemens Tecnomatix Plant Simulation Out-of-Bounds Read Vulnerability (CNVD-2023-75584)

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. Using the function of discrete event simulation for production volume analysis and optimization, and thus improve the manufacturing system performance. Siemens Tecnomatix Plant Simulation suffers from an...

7.8CVSS7.1AI score0.00166EPSS
Exploits0References1
WPVulnDB
WPVulnDB
added 2023/10/09 12:0 a.m.12 views

Optimize Database after Deleting Revisions <= 5.1 - Database Optimization via CSRF

Description The plugin does not have CSRF check when starting the database optimization process, which could allow attackers to make logged in admins perform such action via a CSRF attack...

8.8CVSS6.4AI score0.0007EPSS
Exploits0
Citrix
Citrix
added 2023/10/06 12:0 a.m.8 views

Secondary Ringer not available in HDX optimized MS Teams

The secondary ringer function is not available in Microsoft teams...

7.1AI score
Exploits0
Rows per page
Query Builder