USN-6278-2 dotnet6, dotnet7 vulnerabilities

USN-6278-1 fixed several vulnerabilities in .NET. This update provides the corresponding updates for Ubuntu 22.04 LTS. Original advisory details: It was discovered that .NET did properly handle the execution of certain commands. An attacker could possibly use this issue to achieve remote code...

CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-20887 VMware Aria Operations for Networks Command Injection Vulnerability CVE-2020-35730 Roundcube Webmail Cross-Site Scripting XSS Vulnerability CVE-2020-1264...

CLSA-2023-1679000846 Fix of 6 CVEs

SECURITY UPDATE: New microcode data file 2023-02-14 - New microcodes: sig 0x000606c1, pfmask 0x10, 2022-09-23, rev 0x1000211, size 289792 sig 0x000806f4, pfmask 0x10, 2022-12-19, rev 0x2c000170, size 600064 sig 0x000806f4, pfmask 0x87, 2022-12-27, rev 0x2b000181, size 561152 sig 0x000806f5, pfmas...

CLSA-2023-1677095961 git: Fix of 6 CVEs

CVE-2022-41903: fix out-of-bounds write caused by integer overflow - CVE-2021-40330: forbid newlines in host and path - CVE-2022-39260: reject too long command line strings - CVE-2021-23521: implement size checks for .gitattributes - CVE-2023-22490: prevent arbitrary path exfiltration when using...

Critical Flaws Discovered in Popular Industrial Remote Access Systems

Cybersecurity researchers have found critical security flaws in two popular industrial remote access systems that can be exploited to ban access to industrial production floors, hack into company networks, tamper with data, and even steal sensitive business secrets. The flaws, discovered by Tel...

Vulnerabilities fixed in GRUB2

Researchers have found multiple vulnerabilities in GRUB2. The vulnerability with reference CVE-2020-10713 has been named "Boothole." assigned. This vulnerability allows a malicious person with physical access to the system or a malicious person with administrator privileges able to execute...

Security Bulletin: NeXtScale Fan Power Controller (FPC) July 2014 Fixes (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470)

Summary The NeXtScale Fan Power Controller FPC July 2014 firmware update contains fixes for six vulnerabilities. Vulnerability Details Abstract The NeXtScale Fan Power Controller FPC July 2014 firmware update contains fixes for six vulnerabilities. Content Vulnerability Details: CVE ID:...