Security Bulletin: WebSphere Application Server traditional is vulnerable to a remote code execution vulnerability

Summary WebSphere Application Server, used by IBM Tivoli Network Manager ITNM IP Edition, is vulnerable to a remote code execution vulnerability. Vulnerability Details CVEID:CVE-2023-23477 DESCRIPTION: IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execu...

Security Bulletin: Vulnerabilities found within Java collectors used by IBM Tivoli Network Manager (ITNM) IP Edition.

Summary Vulnerabilities found within Java collectors CVE-2016-5725, CVE-2022-2048, CVE-2022-2047 used by IBM Tivoli Network Manager ITNM IP Edition. Vulnerability Details CVEID:CVE-2016-5725 DESCRIPTION: JSch could allow a remote attacker to traverse directories on the system. An attacker could...

@web-desktop-environment/development-edition-server (>=2.0.0-2, <=2.0.0-alpha.11), @web-desktop-environment/pack-dev (>=2.0.0-1, <=2.0.0-alpha.11) potentially affected by CVE-2023-26114 via code-server (>=4.4.0, <=4.5.1)

code-server NPM version =4.4.0, =2.0.0-2, =2.0.0-1, =2.0.0-alpha.11 Source cves: CVE-2023-26114 Source advisory: GHSA-FRJG-G767-7363...

@web-desktop-environment/development-edition-server (>=0.0.4, <=2.0.0-alpha.11), @web-desktop-environment/pack-dev (>=1.0.1-alpha.1, <=2.0.0-alpha.11) potentially affected by CVE-2023-26114 via code-server (>=3.9.2, <=4.5.1)

code-server NPM version =3.9.2, =0.0.4, =1.0.1-alpha.1, =2.0.0-alpha.11 Source cves: CVE-2023-26114 Source advisory: MEND:CVE-2023-26114...

Security Bulletin: Vulnerability in Apache Commons FileUpload library affect Tivoli Netcool/OMNIbus WebGUI (CVE-2023-24998)

Summary Fix is available for vulnerability in Apache Commons FileUpload library affecting Tivoli Netcool/OMNIbus WebGUI CVE-2023-24998. Apache Commons FileUpload is used by Tivoli Netcool/OMNIbus WebGUI to facilitate file upload in Map Resources admin page. The fix includes Apache Commons...

Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2023-092)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-092 advisory. .NET Core and Visual Studio Denial of Service Vulnerability. CVE-2022-38013 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that Nessus has...

Fedora: Security Advisory for pack (FEDORA-2023-0c354a3f9a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for pack (FEDORA-2023-2df9d60e4c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: pack-0.29.0~rc1-1.fc36

pack is a CLI implementation of the Platform Interface Specification for Cloud Native Buildpacks...

[SECURITY] Fedora 37 Update: pack-0.29.0~rc1-1.fc37

pack is a CLI implementation of the Platform Interface Specification for Cloud Native Buildpacks...

Microsoft Excel 2013 Service Pack 1 Multiple Vulnerabilities (KB5002348)

This host is missing an important security update according to Microsoft KB5002348 Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Description of the security update for Office 2013: March 14, 2023 (KB5002198)

Description of the security update for Office 2013: March 14, 2023 KB5002198 Summary This security update resolves a Microsoft Excel remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2023-23399. Note: To apply this...

Description of the security update for Excel 2013: March 14, 2023 (KB5002348)

Description of the security update for Excel 2013: March 14, 2023 KB5002348 Summary This security update resolves a Microsoft Excel spoofing vulnerability and Microsoft Excel remote code execution vulnerability. To learn more about the vulnerabilities, see the following security advisories:​​​​...

Description of the security update for SharePoint Enterprise Server 2016: March 14, 2023 (KB5002368)

None None...

Description of the security update for Outlook 2013: March 14, 2023 (KB5002265)

Description of the security update for Outlook 2013: March 14, 2023 KB5002265 Summary This security update resolves a Microsoft Outlook elevation of privilege vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2023-23397. Note: To apply th...

Description of the security update for SharePoint Foundation 2013: March 14, 2023 (KB5002367)

Description of the security update for SharePoint Foundation 2013: March 14, 2023 KB5002367 Summary This security update resolves a Microsoft SharePoint Server spoofing vulnerability. To learn more about the vulnerability, see ​​​​Microsoft Common Vulnerabilities and Exposures CVE-2023-23395...

March 14, 2023, cumulative update for SharePoint Enterprise Server 2013 (KB5002366)

None None...

Description of the security update for Office Web Apps Server 2013: March 14, 2023 (KB5002362)

None None...

Description of the security update for SharePoint Enterprise Server 2013: March 14, 2023 (KB5002168)

None None...

[SECURITY] Fedora 38 Update: qmmp-plugin-pack-2.1.0-5.fc38

Plugin pack is a set of extra plugins for Qmmp. FFap - enhanced Monkey's Audio APE decoder 24-bit samples and embedded cue support FFVideo - video playback engine based on FFmpeg library ModPlug - module player with use of the libmodplug library SRC - sample rate converter Goom - audio...