BELL-CVE-2023-33460

Bulletin has no description...

BELL-CVE-2023-39192

Bulletin has no description...

BELL-CVE-2023-4881

Bulletin has no description...

CVE-2023-26469

In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server...

BELL-CVE-2023-3269

Bulletin has no description...

MGASA-2023-0209 Updated sofia-sip packages fix security vulnerability

The OOB read and integer-overflow made by attacker may lead to crash, high consumption of memory or even other more serious consequences. CVE-2023-32307...

MGASA-2023-0203 Updated sysstat packages fix security vulnerability

Multiplication integer overflow in checkoverflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377. CVE-2023-33204...

BELL-CVE-2023-32681

Bulletin has no description...

MGASA-2023-0164 Updated python-pillow packages fix security vulnerability

libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files. CVE-2022-30595 Improper Handling of Highly Compressed GIF Data Data Amplification. CVE-2022-45198...

Improper Authentication

calibreweb is vulnerable to Improper Authentication. The vulnerability exists in the login function of web.py file, which allows a remote attacker to takeover the account by bruteforcing due to improper restriction of excessive authentication attempts...

OSV-2023-299 UNKNOWN READ in log_set_max_level

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57912 Crash type: UNKNOWN READ Crash state: logsetmaxlevel fuzz-journal-remote.c centipede::RunOneInput...

CVE-2023-27986

emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to Emacs Lisp code injections through a crafted mailto: URI with unescaped double-quote characters. It is fixed in 29.0.90...

CVE-2023-0804

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127...

GSD-2023-1000962 orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()

orangefs: Fix kmemleak in orangefspreparedebugfshelpstring This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GHSA-MFMP-8MQG-Q4WM usememos/memos Improper Access Control vulnerability

usememos/memos 0.9.0 and prior is vulnerable to Improper Access Control...

GHSA-RX2M-XR4X-54HH usememos/memos vulnerable to Improper Authorization

usememos/memos 0.9.0 and prior is vulnerable to Improper Authorization...

CVE-2022-44262

ff4j 1.8.1 is vulnerable to Remote Code Execution RCE...

MGASA-2022-0381 Updated perl-Image-ExifTool packages fix security vulnerability

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection. CVE-2022-23935...

CVE-2022-32816

The issue was addressed with improved UI handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. Visiting a website that frames malicious content may lead to UI spoofing...

GSD-2022-1006151 mtd: maps: Fix refcount leak in of_flash_probe_versatile

mtd: maps: Fix refcount leak in offlashprobeversatile This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...