Oracle Solaris Critical Patch Update : jul2023_SRU11_4_58_144_3

This Solaris system is missing necessary patches to address critical security updates : %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Oracle CPU for jul2023. include'deprecatednasllevel.inc'; include'compat.inc'...

Oracle Essbase (July 2023 CPU)

The version of Oracle Essbase installed on the remote host is missing a security patch from the July 2023 Critical Patch Update CPU. It is, therefore, affected by an information disclosure vulnerability in the Security and Provisioning component. This is a difficult to exploit vulnerability that...

Openfire Authentication Bypass / Remote Code Execution Exploit

Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use the unauthenticated Openfire Setup...

WordPress WP Travel Plugin <= 4.1.4 is vulnerable to Cross Site Scripting (XSS)

Software WP Travel Type Plugin Vulnerable versions = 4.1.4 Fixed in 4.2.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID c5dc47fc1dfb Credits Rafie Muhammad Patchstack Required privile...

PT-2023-26092 · Giflib · Giflib

Name of the Vulnerable Software and Affected Versions: ngiflib version 5e7292 Description: The issue is related to an infinite loop in the DecodeGifImg function at ngiflib.c. This function is part of the ngiflib commit 5e7292. Recommendations: For ngiflib version 5e7292, consider disabling the...

WordPress Live Sales Notification for Woocommerce - Woomotiv Plugin <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)

Software Live Sales Notification for Woocommerce - Woomotiv Type Plugin Vulnerable versions = 3.3.1 Fixed in 3.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 825cd413454a Credits Raf...

WordPress Share This Image Plugin <= 1.80 is vulnerable to Cross Site Scripting (XSS)

Software Share This Image Type Plugin Vulnerable versions = 1.80 Fixed in 1.81 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 3c9ca225ea17 Credits Rafie Muhammad Patchstack Required...

Samba Spotlight mdssvc RPC Request Infinite

Description When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function slunpackloop did not validate a field in the network packet that contains the count of elements in an array-like structure. By passing 0 as the count value, the attacked function will run in ...

CLSA-2023-1689700589 Fix CVE(s): CVE-2023-31486

SECURITY UPDATE: insecure default TLS configuration in HTTP::Tiny module - debian/patches/CVE-2023-31486.patch: add verifySSL=1 to HTTP::Tiny default configuration - CVE-2023-31486...

Security Bulletin: IBM Sterling Connect:Direct Web Services is vulnerable to sensitive info exposure due to Apache Commons Net (CVE-2021-37533)

Summary IBM Sterling Connect:Direct Web Services uses Apache Commons Net which has a sensitive information exposure via remote attacker vulnerability. Issue has been addressed. Vulnerability Details CVEID:CVE-2021-37533 DESCRIPTION: Apache Commons Net could allow a remote attacker to obtain...

WordPress Zipcode Redirect Plugin <= 5.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Zipcode Redirect Type Plugin Vulnerable versions = 5.1.1 Fixed in 5.1.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7a0f76a238b8 Credits Rafie Muhammad Patchstack...

PT-2023-4024 · Oracle · Oracle Hyperion Workspace

Name of the Vulnerable Software and Affected Versions: Oracle Hyperion Workspace version 11.2.13.0.000 Description: The issue is related to insecure privilege management in the UI and Visualization component of Oracle Hyperion Workspace. It allows a low-privileged attacker with network access via...

CVE-2023-37266 Weak json web token (JWT) secrets in CasaOS

CasaOS is an open-source Personal Cloud system. Unauthenticated attackers can craft arbitrary JWTs and access features that usually require authentication and execute arbitrary commands as root on CasaOS instances. This problem was addressed by improving the validation of JWTs in commit 705bf1f...

CVE-2023-37266

CasaOS suffers an authentication bypass via crafted JWTs in versions before 0.4.4. Unauthenticated attackers can exploit weak/random JWT handling to access features that require authentication and potentially execute commands as root on affected instances. The underlying issue is tied to inadequa...

CVE-2023-37266 Weak json web token (JWT) secrets in CasaOS

CasaOS is an open-source Personal Cloud system. Unauthenticated attackers can craft arbitrary JWTs and access features that usually require authentication and execute arbitrary commands as root on CasaOS instances. This problem was addressed by improving the validation of JWTs in commit 705bf1f...

CVE-2023-35788 affecting package kernel for versions less than 5.15.116.1-2

CVE-2023-35788 affecting package kernel for versions less than 5.15.116.1-2. A patched version of the package is available...

CVE-2023-3141 affecting package kernel for versions less than 5.15.116.1-2

CVE-2023-3141 affecting package kernel for versions less than 5.15.116.1-2. A patched version of the package is available...

CVE-2023-3111 affecting package kernel for versions less than 5.15.116.1-2

CVE-2023-3111 affecting package kernel for versions less than 5.15.116.1-2. A patched version of the package is available...

CasaOS contains weak JWT secrets

Impact Unauthenticated attackers can craft arbitrary JWTs and access features that usually require authentication and execute arbitrary commands as root on CasaOS instances. Patches The problem was addressed by improving the validation of JWTs in 705bf1f. This patch is part of CasaOS 0.4.4...

SUSE-SU-2023:2846-1 Security update for go1.20

This update for go1.20 fixes the following issues: go was updated to version 1.20.6 bsc1206346: - CVE-2023-29406: Fixed insufficient sanitization of Host header in net/http bsc1213229...