CVE-2023-29625

Employee Performance Evaluation System v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file uploaded to the server...

CVE-2023-29625: Unrestricted Upload of File with Dangerous Type

Employee Performance Evaluation System v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file uploaded to the server...

Employee Performance Evaluation System Code Vulnerabilities

Employee Performance Evaluation System is an employee performance evaluation system by Carlo Montero personal developer. A security vulnerability exists in Employee Performance Evaluation System v1.0. An attacker can exploit this vulnerability to execute arbitrary code via specially crafted files...

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.10.0 ESR. Security Fixes: MFSA-TMP-2023-0001 Mozilla: Double-free in libwebp BZ2186102 Mozilla: Fullscreen notification obscured CVE-2023-295...

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.10.0 ESR. Security Fixes: MFSA-TMP-2023-0001 Mozilla: Double-free in libwebp BZ2186102 Mozilla: Fullscreen notification obscured CVE-2023-295...

PT-2023-22336 · Unknown · Employee Performance Evaluation System

Name of the Vulnerable Software and Affected Versions: Employee Performance Evaluation System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted file uploaded to the server. This is due to an arbitrary file upload vulnerability in the system...

Internet Bug Bounty: CVE-2023-28755: ReDoS vulnerability in URI

A ReDoS vulnerability was discovered in the URI component of the Ruby programming language. The vulnerability allowed attackers to cause an increase in execution time for parsing strings to URI objects, resulting in high resource consumption, reduced performance, and denial of service. The...

[SECURITY] Fedora 37 Update: firefox-112.0-3.fc37

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

SUSE-SU-2023:1820-1 Security update for harfbuzz

This update for harfbuzz fixes the following issues: - CVE-2023-25193: Fixed vulnerability that allowed attackers to trigger On^2 growth via consecutive marks bsc1207922...

IBM Instana Observability Data Access

The vulnerability of the Docker-based data storage solution for APM monitoring in IBM Instana Observability involves a lack of authentication for critical functions. Exploiting this vulnerability could allow an attacker operating remotely to gain access to read or modify data...

KB5021112 - Description of the security update for SQL Server 2008 R2 SP3 GDR: February 14, 2023

KB5021112 - Description of the security update for SQL Server 2008 R2 SP3 GDR: February 14, 2023 Applies To SQL Server 2008 R2 Service Pack 3 Summary Improvements and fixes included in this update How to obtain and install the update More information File information Information about protection...

KB5021128 - Description of the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: February 14, 2023

KB5021128 - Description of the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: February 14, 2023 Applies To SQL Server 2016 Service Pack 3 - duplicate do not use Summary Improvements and fixes included in this update How to obtain and install the update More information File...

KB5021127 - Description of the security update for SQL Server 2017 GDR: February 14, 2023

KB5021127 - Description of the security update for SQL Server 2017 GDR: February 14, 2023 Applies To SQL Server 2017 on Windows SQL Server 2017 on Linux Summary Improvements and fixes included in this update How to obtain and install the update More information File information Information about...

SUSE: Security Advisory (SUSE-SU-2023:1797-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:1794-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Do all initialization before exposing /dev/kvm to userspace CVE-2022-49932 A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege...

SUSE: Security Advisory (SUSE-SU-2023:1792-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9 vital criteria for effective endpoint security: Insights from the 'Endpoint Security Evaluation Guide' eBook

Endpoint security has never been more important, and with the increasing complexity of the security stack, choosing the right solution can be confusing. The good news is that there is a guide available to help organizations navigate this complex landscape: the "Endpoint Security Evaluation Guide"...

SUSE: Security Advisory (SUSE-SU-2023:1747-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unbreakable Enterprise kernel security update

5.15.0-100.96.32 - crypto: Report fips module name and version for aarch64 Saeed Mirzamohammadi Orabug: 35225251 - uek-rpm: Enable RFC7919 config for aarch64 Saeed Mirzamohammadi Orabug: 35225251 5.15.0-100.96.31 - uek-rpm: Update linux-firmware dependency Somasundaram Krishnasamy Orabug: 3521342...