Moderate: Red Hat Bug Fix Advisory: Red Hat Ansible Automation Platform 2.4 Setup Bundle Release Update

An update is now available for Red Hat Ansible Automation Platform 2.4 Setup Bundle Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to...

Exploit for Improper Input Validation in Atlassian Confluence_Data_Center

CVE-2023-22515 CVE-2023-22515, a critical vulnerability affec...

CVE-2023-36704

Windows Setup Files Cleanup Remote Code Execution Vulnerability...

CVE-2023-36704

Windows Setup Files Cleanup Remote Code Execution Vulnerability...

Remote code execution

Windows Setup Files Cleanup Remote Code Execution Vulnerability...

CVE-2023-36704

Converging details from connected documents indicate CVE-2023-36704, named Windows Setup Files Cleanup, is a remote code execution vulnerability in the Windows Setup Files Cleanup component. The KLA61358 entry explicitly notes a remote code execution vulnerability for Windows Setup Files Cleanup ...

CVE-2023-36704 Windows Setup Files Cleanup Remote Code Execution Vulnerability

...

CVE-2023-36704 Windows Setup Files Cleanup Remote Code Execution Vulnerability

...

Windows Setup Files Cleanup Remote Code Execution Vulnerability

...

October 10, 2023—KB5031364 (OS Build 20348.2031)

October 10, 2023—KB5031364 OS Build 20348.2031 Applies To Windows Server 2022 Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows Server 2022, see its update history page. Note...

CVE-2023-45208

A command injection in the parsingxmlstasurvey function inside libcgifunc.so of the D-Link DAP-X1860 repeater 1.00 through 1.01b05-01 allows attackers within range of the repeater to run shell commands as root during the setup process of the repeater, via a crafted SSID. Also, network names...

CVE-2023-45208

A command injection in the parsingxmlstasurvey function inside libcgifunc.so of the D-Link DAP-X1860 repeater 1.00 through 1.01b05-01 allows attackers within range of the repeater to run shell commands as root during the setup process of the repeater, via a crafted SSID. Also, network names...

CVE-2023-45208

A command injection in the parsingxmlstasurvey function inside libcgifunc.so of the D-Link DAP-X1860 repeater 1.00 through 1.01b05-01 allows attackers within range of the repeater to run shell commands as root during the setup process of the repeater, via a crafted SSID. Also, network names...

PT-2023-9152

Name of the Vulnerable Software and Affected Versions SpaceX Starlink Wi-Fi router Gen 2 versions prior to 2023.48.0 Description The issue is related to the lack of protection of the web page structure, allowing a remote attacker to conduct a cross-site scripting XSS attack via the ssid and...

CVE-2023-36704: Use of Uninitialized Resource

Windows Setup Files Cleanup Remote Code Execution Vulnerability...

PT-2023-6153 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The vulnerability is related to insufficient input validation in the Windows Setup Files Cleanup component. It allows remote attackers to execute arbitrary code on the system...

CVE-2023-45208

The CVE-2023-45208 issue affects D-Link DAP-X1860 repeaters (versions 1.00–1.01b05-01) where the parsing_xml_stasurvey function in libcgifunc.so is vulnerable to command injection. An attacker within wireless range can craft the SSID to execute shell commands as root during setup; network names c...

Code injection

Micronaut Security is a security solution for applications. Prior to versions 3.1.2, 3.2.4, 3.3.2, 3.4.3, 3.5.3, 3.6.6, 3.7.4, 3.8.4, 3.9.6, 3.10.2, and 3.11.1, IdTokenClaimsValidator skips aud claim validation if token is issued by same identity issuer/provider. Any OIDC setup using Micronaut...

CVE-2023-36820 micronaut security has invalid IdTokenClaimsValidator logic on aud

Micronaut Security is a security solution for applications. Prior to versions 3.1.2, 3.2.4, 3.3.2, 3.4.3, 3.5.3, 3.6.6, 3.7.4, 3.8.4, 3.9.6, 3.10.2, and 3.11.1, IdTokenClaimsValidator skips aud claim validation if token is issued by same identity issuer/provider. Any OIDC setup using Micronaut...

CVE-2023-36820 micronaut security has invalid IdTokenClaimsValidator logic on aud

Micronaut Security is a security solution for applications. Prior to versions 3.1.2, 3.2.4, 3.3.2, 3.4.3, 3.5.3, 3.6.6, 3.7.4, 3.8.4, 3.9.6, 3.10.2, and 3.11.1, IdTokenClaimsValidator skips aud claim validation if token is issued by same identity issuer/provider. Any OIDC setup using Micronaut...