SUSE-SU-2023:3439-1 Security update for ghostscript

This update for ghostscript fixes the following issues: - CVE-2023-38559: Fixed out-of-bounds read in devnpcxwriterle that could result in DoS bsc1213637...

PT-2023-17397 · Hitachi · Hitachi Hirdb Server With Addtional Function +2

Name of the Vulnerable Software and Affected Versions: Hitachi HiRDB Server versions before 09-60-39, before 09-65-23, before 09-66-17, before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before 10-06-02 Hitachi HiRDB Server With Addtional Function versions before 09-60-2M, before...

BELL-CVE-2023-39742

Bulletin has no description...

SUSE-SU-2023:3402-1 Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following issues: - The patch for CVE-2023-37328 is removed because it was added by mistake and the package has never been affected by this vulnerability. bsc1213131...

Security update for zabbix (moderate)

openSUSE Security Update: Security update for zabbix Announcement ID: openSUSE-SU-2023:0191-1 Rating: moderate References: 1213338 Cross-References: CVE-2023-29454 CVSS scores: CVE-2023-29454 NVD : 5.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N Affected Products: openSUSE Backports SLE-15-SP4...

OPENSUSE-SU-2023:0191-1 Security update for zabbix

This update for zabbix fixes the following issues: Updated to latest release 4.0.47, this version fixes CVE-2023-29454 boo1213338: - New Features and Improvements + ZBXNEXT-7694 Added 'utf8mb3' character set support for MySQL database + ZBX-20946 Enabled Bulgarian, Chinese zhTW, German, Greek,...

BELL-CVE-2023-20593

Bulletin has no description...

PT-2023-4190 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: macOS Monterey versions prior to 12.6.8 iOS versions prior to 16.6 iPadOS versions prior to 16.6 macOS Big Sur versions prior to 11.7.9 macOS Ventura versions prior to 13.5 watchOS versions prior to 9.6 Description: A logic issue was addresse...

PT-2023-5649 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.6 macOS Big Sur versions prior to 11.7.9 iOS versions prior to 15.7.8 and prior to 16.6 iPadOS versions prior to 15.7.8 and prior to 16.6 macOS Monterey versions prior to 12.6.8 tvOS versions prior to 16.6 macOS...

CVE-2023-35900

IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to disclosing server version information which may be used to determine software vulnerabilities at the operating system level. IBM X-Force ID: 259368...

PT-2024-1204

Name of the Vulnerable Software and Affected Versions webkit2gtk versions prior to 2.42.5-0ubuntu0.22.04.2 webkit2gtk3 affected versions not specified Apple products affected versions not specified Description The webkit2gtk and webkit2gtk3 engines contain a type confusion flaw. This issue is...

CVE-2023-37475 vulnerabilities

Vulnerabilities for packages: argo-events-fips, argo-events...

SUSE-SU-2023:2839-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2023-31047: Fixed a potential bypass of validation when uploading multiple files using one form field bsc1210866. - CVE-2023-36053: Fixed potential regular expression denial of service vulnerability in EmailValidator/URLValidator...

Security Bulletin: IBM Robotic Process Automation is vulnerable to disclosure of server version information (CVE-2023-35900)

Summary IBM Robotic Process Automation is vulnerable to disclosure of server version information which may be used to determine software vulnerabilities at the operating system level. CVE-2023-35900 Vulnerability Details CVEID:CVE-2023-35900 DESCRIPTION: IBM Robotic Process Automation for Cloud P...

GHSA-CGCV-5272-97PR vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver...

BELL-CVE-2023-35784

Bulletin has no description...

CVE-2023-34453 vulnerabilities

Vulnerabilities for packages: druid...

CVE-2023-34454 vulnerabilities

Vulnerabilities for packages: druid...

CVSSv4 Public Preview Announcement

On June 8, 2023, at the 35th Annual FIRST Conference in Montreal, the public preview of CVSSv4 was announced. The Common Vulnerability Scoring System CVSS is an open framework for communicating the characteristics and severity of software vulnerabilities. Since its initial release in 2004, CVSS h...

Hey Yara, find some vulnerabilities

Intro Finding vulnerabilities in software is no easy task by itself. Doing this at cloud scale is very challenging to perform manually, and we use tools to help us identify patterns or vulnerability signatures. Yara is one of those tools. Yara is a very popular tool with Blue teams, malware...