OPENSUSE-SU-2023:0025-1 Security update for cacti, cacti-spine

This update for cacti, cacti-spine fixes the following issues: cacti-spine 1.2.23: Fix unexpected reindexing when using uptime as the reindex method Spine should prevent the script server from connecting to remote when offline Improve Script Server Timeout Logging Add SQLNOCACHE to Spine Queries...

Metasploit Weekly Wrap-Up

See something say something Have an idea on how to expand on Metasploit Documentation on ? Did you see a typo or some other error on the docs site? Thanks to adfoster-r7, submitting an update to the documentation is as easy as clicking the 'Edit this page on GitHub' link on the page you want to...

CVE-2022-38110

In Database Performance Analyzer DPA 2022.4 and older releases, certain URL vectors are susceptible to authenticated reflected cross-site scripting...

Cross site scripting

In Database Performance Analyzer DPA 2022.4 and older releases, certain URL vectors are susceptible to authenticated reflected cross-site scripting...

GHSA-7CP7-JFP6-JH4F Shopware's log module vulnerable to Improper Output Neutralization

Impact The log module contains all kind of sent mails. It is possible to see the password reset email of customers and admin users to gain probably more access. Patches Update to the latest 6.4.18.1 version. Workarounds - For older versions of 6.1, 6.2, and 6.3, corresponding security measures ar...

CVE-2022-38110 Reflected Cross-Site Scripting Vulnerability

In Database Performance Analyzer DPA 2022.4 and older releases, certain URL vectors are susceptible to authenticated reflected cross-site scripting...

CVE-2022-38110 Reflected Cross-Site Scripting Vulnerability

In Database Performance Analyzer DPA 2022.4 and older releases, certain URL vectors are susceptible to authenticated reflected cross-site scripting...

CVE-2022-38110

SolarWinds Database Performance Analyzer (DPA) versions 2022.4 and older are vulnerable to authenticated reflected cross‑site scripting via certain URL vectors. The root cause is exposure of URL handling that can reflect input back to authenticated users, enabling XSS within affected sessions. Af...

CVE-2022-38110: Improper Neutralization of Input During Web Page Generation

In Database Performance Analyzer DPA 2022.4 and older releases, certain URL vectors are susceptible to authenticated reflected cross-site scripting...

Database Performance Analyzer Cross-Site Script Vulnerability

SolarWinds Database Performance Analyzer Dpa is a database performance analyzer from SolarWinds, Inc. It is used to monitor, diagnose, and resolve performance issues with many types of database instances. A cross-site scripting vulnerability exists in Database Performance Analyzer DPA version...

Database Performance Analyzer security vulnerabilities

SolarWinds Database Performance Analyzer Dpa is a database performance analyzer from SolarWinds, Inc. It is used to monitor, diagnose, and resolve performance issues with many types of database instances. A security vulnerability exists in Database Performance Analyzer DPA version 2022.4 and...

PT-2023-13592 · Unknown · Database Performance Analyzer

Name of the Vulnerable Software and Affected Versions: Database Performance Analyzer DPA versions 2022.4 and older Description: The issue concerns authenticated reflected cross-site scripting, where certain URL vectors are susceptible to this type of attack. Recommendations: For versions 2022.4 a...

[SECURITY] Fedora 37 Update: firefox-109.0-1.fc37

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

GSD-2023-1001210 perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox()

perf/x86/intel/uncore: Fix reference count leak in hswephaslimitsbox This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

OPENSUSE-SU-2023:0018-1 Security update for apptainer

This update for apptainer fixes the following issues: Updated to 1.1.2 which fixed CVE-2022-39237 CVE-2022-39237: The sif dependency included in Apptainer before this release does not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. This release...

[SECURITY] Fedora 37 Update: cacti-spine-1.2.23-1.fc37

Spine is a supplemental poller for Cacti that makes use of pthreads to achieve excellent performance...

[SECURITY] Fedora 36 Update: cacti-spine-1.2.23-1.fc36

Spine is a supplemental poller for Cacti that makes use of pthreads to achieve excellent performance...

SUSE: Security Advisory (SUSE-SU-2023:0084-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libqb bug fix and enhancement update

An update is available for libqb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libqb packages provide a library with the primary purpose of providing high...

RXSA-2023:0101 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: memory corruption in AX88179178A based USB ethernet device. CVE-2022-2964 kernel: i915: Incorrect GPU TLB flush can lead to random memory access CVE-2022-4139 For more details about the...