WP RSS Images <= 1.1 - Cross-Site Request Forgery

The plugin does not adequately verify requests use nonces, leading to a potential Cross-Site Request Forgery vulnerability...

CVE-2023-36611

The affected TBox RTUs allow low privilege users to access software security tokens of higher privilege. This could allow an attacker with “user” privileges to access files requiring higher privileges by establishing an SSH session and providing the other tokens...

CVE-2023-36610

​The affected TBox RTUs generate software security tokens using insufficient entropy. The random seed used to generate the software tokens is not initialized correctly, and other parts of the token are generated using predictable time-based values. An attacker with this knowledge could successful...

CVE-2023-36611

The affected TBox RTUs allow low privilege users to access software security tokens of higher privilege. This could allow an attacker with “user” privileges to access files requiring higher privileges by establishing an SSH session and providing the other tokens...

CVE-2023-36610

The CVE-2023-36610 issue affects Ovarro TBox RTUs, where software security tokens are generated with insufficient entropy due to an uninitialized random seed and time-based values in other token components. This weakness can allow an attacker to brute-force tokens and authenticate, per multiple s...

CVE-2023-36610

​The affected TBox RTUs generate software security tokens using insufficient entropy. The random seed used to generate the software tokens is not initialized correctly, and other parts of the token are generated using predictable time-based values. An attacker with this knowledge could successful...

PT-2023-25632 · Tbox Rtus · Tbox Rtus

Name of the Vulnerable Software and Affected Versions: TBox RTUs affected versions not specified Description: The affected TBox RTUs generate software security tokens using insufficient entropy. The random seed used to generate the software tokens is not initialized correctly, and other parts of...

CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

ASB-A-280380543

Bulletin has no description...

ASB-A-226921651

Bulletin has no description...

ASB-A-276751076

Bulletin has no description...

ASB-A-274005916

Bulletin has no description...

MGASA-2023-0209 Updated sofia-sip packages fix security vulnerability

The OOB read and integer-overflow made by attacker may lead to crash, high consumption of memory or even other more serious consequences. CVE-2023-32307...

Arbitrary File Upload

zoujingli/thinkadmin is vulnerable to Arbitrary File Upload. The vulnerability exists because the library does not properly validate files uploaded via api/upload.php, which allows an attacker to bypass the file upload restrictions and execute malicious code on the system...

CVE-2023-22359

User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...

GHSA-VMXG-WX6C-4F3R Admidio Improper Access Control vulnerability

Admidio prior to 4.2.9 is vulnerable to Improper Access Control...

SUSE-SU-2023:2618-1 Security update for dav1d

This update for dav1d fixes the following issues: - CVE-2023-32570: Fixed possible crash when decoding a frame bsc1211262...

Dynamic Linq vulnerable to remote code execution

Dynamic Linq 1.0.7.10 through 1.2.25 before 1.3.0 allows attackers to execute arbitrary code and commands when untrusted input to methods including Where, Select, OrderBy is parsed...

MAL-2023-146 Malicious code in btc-web3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ecc5f6e374742ff689c439edbd6c978b0393ef967c4ac2d2cf8cdda216b7b483 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MGASA-2023-0203 Updated sysstat packages fix security vulnerability

Multiplication integer overflow in checkoverflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377. CVE-2023-33204...