PT-2023-36189 · Cni +1 · Cni +1

Name of the Vulnerable Software and Affected Versions: cni affected versions not specified Description: The issue is related to a security release in the go 1.19 package, which is used to rebuild the cni package. Recommendations: At the moment, there is no information about a newer version that...

WordPress Jetpack Plugin <= 12.1 is vulnerable to Broken Access Control

Software Jetpack Type Plugin Vulnerable versions = 12.1 Fixed in 12.1.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE N/A Patch priority High CVSS severity High 9 Developer Claim ownership PSID e45930af254c Credits Jetpack Required privilege Author Published 30...

PT-2023-36187 · Google +1 · Go +1

Name of the Vulnerable Software and Affected Versions: Terraform affected versions not specified Description: The issue is related to a security release in Go 1.19, which Terraform is rebuilt with to address the problem. Recommendations: At the moment, there is no information about a newer versio...

PT-2023-36188 · Unknown · Cni-Plugins

Name of the Vulnerable Software and Affected Versions: cni-plugins affected versions not specified Description: The issue is related to the go 1.19 security release. The package cni-plugins has been rebuilt to address this issue. Recommendations: At the moment, there is no information about a new...

SUSE-SU-2023:2288-1 Security update for kubernetes1.18

This update of kubernetes1.18 fixes the following issues: - rebuild the package with the go 1.19 security release bsc1200441 bsc1209658...

PT-2023-36181 · Go +1 · Go +1

Name of the Vulnerable Software and Affected Versions: kubernetes1.18 version 1.18 Description: The issue is related to a security release in the go 1.19 package, which is used by kubernetes1.18. The package has been rebuilt with the go 1.19 security release to address the issue. Recommendations:...

PT-2023-36179 · Unknown · Geoipupdate

Name of the Vulnerable Software and Affected Versions: geoipupdate affected versions not specified Description: The issue is related to the geoipupdate package, which has been rebuilt with the go 1.19 security release. Recommendations: At the moment, there is no information about a newer version...

SUSE-SU-2023:2261-1 Security update for terraform-provider-null

This update of terraform-provider-null fixes the following issues: - rebuild the package with the go 1.19 security release bsc1200441 bsc1209658...

WordPress Unspecified Vulnerability (May 2023) - Linux

WordPress is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress";...

PT-2023-36177 · Unknown · Terraform-Provider-Null

Name of the Vulnerable Software and Affected Versions: terraform-provider-null affected versions not specified Description: The issue is related to a security release in Go 1.19, which required a rebuild of the terraform-provider-null package. Recommendations: At the moment, there is no informati...

SUSE-SU-2023:2253-1 Security update for terraform-provider-aws

This update of terraform-provider-aws fixes the following issues: - rebuild the package with the go 1.19 security release bsc1200441 bsc1209658...

SUSE-SU-2023:2212-1 Security update for prometheus-sap_host_exporter

This update of prometheus-saphostexporter fixes the following issues: - rebuild the package with the go 1.19 security release bsc1200441 bsc1209658...

PT-2023-36170 · Unknown +1 · Prometheus-Sap Host Exporter +1

Name of the Vulnerable Software and Affected Versions: prometheus-sap host exporter affected versions not specified Description: The issue is related to the go 1.19 security release. The estimated number of potentially affected devices worldwide is not available. There is no information about...

CVE-2023-21496

Active Debug Code vulnerability in ActivityManagerService prior to SMR May-2023 Release 1 allows attacker to use debug function via setting debug level...

GHSA-8849-CV9F-VCCM Access bypass in Drupal core

The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your...

Access bypass in Drupal core

The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your...

CVE-2023-31250

The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your...

Design/Logic Flaw

The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your...

CVE-2023-31250

The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your...

UBUNTU-CVE-2022-25275

In some situations, the Image module does not correctly check access to image files not stored in the standard public files directory when generating derivative images using the image styles system. Access to a non-public file is checked only if it is stored in the "private" file system. However,...