CVE-2023-41096

The CVE-2023-41096 issue affects Silicon Labs Ember ZNet SDK versions 7.3.1 and earlier, caused by missing encryption of security keys stored in SecureVault High modules. This allows modification or extraction of network credentials stored in flash. Mitigation: upgrade to a version that includes ...

CVE-2023-41096 Keys Stored in Plaintext on Secure Vault High for Silabs Ember ZNet devices

Missing Encryption of Security Keys vulnerability in Silicon Labs Ember ZNet SDK on 32 bit, ARM SecureVault High modules allows potential modification or extraction of network credentials stored in flash. This issue affects Silicon Labs Ember ZNet SDK: 7.3.1 and earlier...

CVE-2023-41095

Silicon Labs OpenThread SDK (32-bit ARM, SecureVault High modules) is affected by CVE-2023-41095 due to missing encryption of security keys. The vulnerability could allow modification or extraction of network credentials stored in flash. Affected versions: 2.3.1 and earlier. Root cause: lack of e...

CVE-2023-41095 Keys Stored in Plaintext on Secure Vault High for Silabs OpenThread devices

Missing Encryption of Security Keys vulnerability in Silicon Labs OpenThread SDK on 32 bit, ARM SecureVault High modules allows potential modification or extraction of network credentials stored in flash. This issue affects Silicon Labs OpenThread SDK: 2.3.1 and earlier...

Silicon Labs OpenThread SDK Security Vulnerability

Silicon Labs OpenThread SDK is a software development kit from Silicon Labs, Inc. that supports the development and deployment of the Thread protocol. A security vulnerability exists in the Silicon Labs OpenThread SDK that stems from the presence of a security key missing encryption vulnerability...

PT-2023-27782 · Silicon · Silicon Labs Ember Znet Sdk

Name of the Vulnerable Software and Affected Versions: Silicon Labs Ember ZNet SDK versions 7.3.1 and earlier Description: The issue allows potential modification or extraction of network credentials stored in flash due to missing encryption of security keys in the Silicon Labs Ember ZNet SDK on...

PT-2023-27781 · Silicon · Openthread Sdk

Name of the Vulnerable Software and Affected Versions: Silicon Labs OpenThread SDK versions 2.3.1 and earlier Description: The issue affects the Silicon Labs OpenThread SDK on 32-bit, ARM SecureVault High modules, allowing potential modification or extraction of network credentials stored in flas...

rs-stellar-base (0.1.0), sep5 (>=0.0.1, <=0.0.2) +2 more potentially affected by CVE-2023-46135 via stellar-strkey (>=0.0.6, <=0.0.7)

stellar-strkey CARGO version =0.0.6, =0.0.1, =0.1.1, =0.1.0, =0.1.5 Source cves: CVE-2023-46135 Source advisory: OSV:GHSA-5873-6FWQ-463F...

Security Bulletin: A vulnerability in IBM Java SDK and IBM Java Runtime affect Rational Business Developer.

Summary There is a vulnerability in IBM® SDK Java™ Technology Edition, Version 8 and IBM® Runtime Environment Java™ Version 8 used by Rational Business Developer. Rational Business Developer has provided a fix for the applicable CVE. This issue was disclosed as part of the IBM Java SDK and Runtim...

[SECURITY] Fedora 38 Update: dotnet6.0-6.0.123-1.fc38

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

[SECURITY] Fedora 38 Update: dotnet7.0-7.0.112-1.fc38

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

[SECURITY] Fedora 37 Update: dotnet6.0-6.0.123-1.fc37

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

[SECURITY] Fedora 37 Update: dotnet7.0-7.0.112-1.fc37

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

Ubuntu 23.10 : .Net regressions (USN-6438-2)

The remote Ubuntu 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6438-2 advisory. USN-6438-1 fixed vulnerabilities in .Net. It was discovered that the fix for CVE-2023-36799 was incomplete. This update fixes the problem. Tenable has extracted the...

GO-2023-2137 Credentials leak in github.com/ydb-platform/ydb-go-sdk/v3

A custom credentials object that does not implement the fmt.Stringer interface may leak sensitive information e.g., credentials via logs...

RLSA-2023:5749 Important: .NET 7.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 7.0 to SDK 7.0.112 and Runtime 7.0.12...

Security Bulletin: Vulnerabilities in IBM Java Runtime affecting Tivoli Netcool/OMNIbus (Multiple CVEs)

Summary There are vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 8 that is used by Tivoli Netcool/OMNIbus. These were disclosed as part of the IBM Java SDK updates in November 2022 and February 2023. Vulnerability Details CVEID:CVE-2022-21426 DESCRIPTION: An...

MAL-2023-8396 Malicious code in fec-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcb9ae48dadfaae28ed7f4c8edcde694f63b90d1e7533c789704cabc4147c8c7 The OpenSSF Package Analysis project identified 'fec-sdk' @ 0.2.9 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in fec-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcb9ae48dadfaae28ed7f4c8edcde694f63b90d1e7533c789704cabc4147c8c7 The OpenSSF Package Analysis project identified 'fec-sdk' @ 0.2.9 npm as malicious. It is considered malicious because: - The package communicat...

Fedora: Security Advisory for libvpx (FEDORA-2023-f696934fbf)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...