PT-2023-18759 · Bzip2 +1 · Bzip2 +1

Name of the Vulnerable Software and Affected Versions: bzip2 crate versions prior to 0.4.4 Description: The issue allows attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. This can lead to a denial of service DoS vector. Both Decompress and Compre...

PT-2023-14309 · WordPress · Bg Bible References

Name of the Vulnerable Software and Affected Versions: Bg Bible References WordPress plugin versions 3.8.14 and earlier Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitized and escaped before being outputted back in...

CVE-2022-46177 Discourse password reset link can lead to in account takeover if user changes to a new email

Discourse is an option source discussion platform. Prior to version 2.8.14 on the stable branch and version 3.0.0.beta16 on the beta and tests-passed branches, when a user requests for a password reset link email, then changes their primary email, the old reset email is still valid. When the old...

Multiple vulnerabilities in Fuji Electric V-Server

Overview V-Server provided by FUJI ELECTRIC CO., LTD. contains multiple vulnerabilities listed below. Stack-based Buffer ovewflow CWE-121 - CVE-2022-47908 Out-of-bounds Read CWE-125 - CVE-2022-41645 Out-of-bounds Write CWE-787 - CVE-2022-47317 Michael Heinzl reported these vulnerabilities to...

PT-2023-15971 · Unknown · Daloradius

Name of the Vulnerable Software and Affected Versions: daloradius versions prior to master-branch Description: The issue concerns a code injection problem in the GitHub repository lirantal/daloradius. Recommendations: For versions prior to the master-branch, update to the master-branch or later t...

PT-2023-1560 · Suse · Libzypp-Plugin-Appdata +1

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise Server for SAP 15-SP3 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426 openSUSE Leap 15.4 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426 Description: The issue is related to an Improper...

CVE-2022-37933

A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be exploited to allow local unauthorized data injection. HPE has made the following software updates to resolve the vulnerability in HPE Superdome Flex firmware...

PT-2023-14244 · Aruba · Clearpass Onguard +1

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.x: 6.10.7 and below Aruba ClearPass Policy Manager versions 6.9.x: 6.9.12 and below Description: A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance...

PT-2023-14245 · Aruba · Clearpass Onguard Linux Agent +1

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.x: 6.10.7 and below Aruba ClearPass Policy Manager versions 6.9.x: 6.9.12 and below Description: A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance...

PT-2023-14243 · Aruba · Aruba Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.x: 6.10.7 and below Aruba ClearPass Policy Manager versions 6.9.x: 6.9.12 and below Description: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an...

PT-2023-14914 · Tellus +1 · Tellus +1

Name of the Vulnerable Software and Affected Versions: V-SFT versions 6.1.7.0 and earlier TELLUS versions 4.0.12.0 and earlier Description: The issue allows a local attacker to obtain information and/or execute arbitrary code by having a user open a specially crafted image file. This is due to an...

PT-2023-14242 · Aruba · Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: ClearPass Policy Manager versions 6.9.12 and below ClearPass Policy Manager versions 6.10.7 and below Description: The issue concerns the web-based management interface of ClearPass Policy Manager, where an authenticated remote attacker could...

PT-2023-12985 · Prosyst · Prosys Opc Ua Simulation Server

Name of the Vulnerable Software and Affected Versions: Prosys OPC UA Simulation Server versions prior to 5.3.0-64 UA Modbus Server versions 1.4.18-5 and prior Description: The issue concerns insufficient protection of credentials, potentially allowing an attacker to obtain user credentials and ga...

SUSE-SU-2023:0007-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2022-3109: Fixed null pointer dereference in vp3decodeframe bsc1206442...

PT-2023-14252 · WordPress · Letsrecover

Name of the Vulnerable Software and Affected Versions: LetsRecover WordPress plugin versions prior to 1.2.0 Description: The issue is related to a SQL injection that occurs because a parameter is not properly sanitized and escaped before being used in a SQL statement. This can be exploited by hig...

DLA-3253-1 openvswitch - security update

Bulletin has no description...

SUSE-SU-2022:4639-1 Security update for polkit-default-privs

This update for polkit-default-privs fixes the following issues: Update to version 13.2+20221216.a0c29e6: - backport usbguard actions bsc1206414...

PT-2022-28144

Name of the Vulnerable Software and Affected Versions M-Files Server versions prior to 22.10.11846.0 Description The issue allows sensitive information to be inserted into log files, potentially enabling the obtainment of sensitive tokens from logs if specific configurations are set...

DSA-5306-1 gerbv - security update

Bulletin has no description...

PT-2022-8078 · Sierra Wireless · Sierra Wireless Aleos

Name of the Vulnerable Software and Affected Versions: Sierra Wireless ALEOS versions prior to 4.4.9 Sierra Wireless ALEOS versions 4.5.x through 4.9.x before 4.9.5 Sierra Wireless ALEOS versions 4.10.x through 4.13.x before 4.14.0 Description: The ACENet service in Sierra Wireless ALEOS allows...