PT-2023-25677 · WordPress · Schema Pro

Name of the Vulnerable Software and Affected Versions: Schema Pro versions through 2.7.7 Description: A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed on behalf of a user. This issue affects the Schema Pro plugin, enabling Cross Site Request Forgery...

Security Notice: Triton Inference Server - November 2023

This notice is regarding Triton Inference Server. Go to NVIDIA Product Security. December 4, 2023: Triton Inference Server is designed for flexibility and allows developers to create and deploy inferencing solutions in various ways. Triton Inference Server enables teams to deploy any AI model fro...

PT-2023-28299 · Unknown · Chamilo Lms

Name of the Vulnerable Software and Affected Versions: Chamilo LMS versions prior to 1.11.24 Description: The issue concerns an unrestricted file upload in the /main/inc/ajax/exercise.ajax.php endpoint, allowing authenticated attackers with a learner role to achieve remote code execution by...

PT-2023-30677 · Prestashop · Prestashop Amazzing Filter

Name of the Vulnerable Software and Affected Versions: Prestashop Amazzing filter versions up to 3.2.5 Description: The issue allows remote attackers to inject arbitrary JavaScript code due to a Cross Site Scripting XSS vulnerability in the Search filters of Prestashop Amazzing filter...

PT-2023-28293 · Unknown · Chamilo Lms

Name of the Vulnerable Software and Affected Versions: Chamilo LMS versions prior to 1.11.24 Description: The issue concerns improper neutralisation of special characters, allowing command injection in the main/lp/openoffice presentation.class.php file. This enables users who are permitted to...

PT-2023-28295 · Unknown · Chamilo Lms

Name of the Vulnerable Software and Affected Versions: Chamilo LMS versions prior to 1.11.24 Description: The issue concerns a command injection in the main/lp/openoffice text document.class.php file, allowing users who can upload Learning Paths to achieve remote code execution. This is due to th...

You Don’t Need to Turn Off Apple’s NameDrop Feature in iOS 17

Yes, your iPhone automatically turns on NameDrop with the latest software update. But you shouldn’t really be worried about it—regardless of what the police are saying...

SUSE-SU-2023:4579-1 Security update for slurm_22_05

This update for slurm2205 fixes the following issues: - CVE-2023-41914: Fixed a filesystem handling race condition that could have led to an attacker taking control of an arbitrary file, or removing entire directory contents bsc1216207. Bug fixes: - Add missing dependencies to slurm-config to...

DLA-3666-1 reportbug - security update

Bulletin has no description...

SUSE-SU-2023:4547-1 Security update for fdo-client

This update for fdo-client fixes the following issues: - Removed build key via utils/keysgen.sh. bsc1216293...

DLA-3664-1 symfony - security update

Bulletin has no description...

PT-2023-28690 · Dell · Dell Command Configure

Name of the Vulnerable Software and Affected Versions: Dell Command | Configure versions prior to 4.11.0 Description: The issue is related to improper access control, allowing a local malicious user to potentially modify files inside the installation folder during an application upgrade. This cou...

PT-2023-32081 · WordPress · Funnelforms Free

Name of the Vulnerable Software and Affected Versions: Funnelforms Free plugin for WordPress versions up to, and including, 3.4 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the fnsf copy posts function. This allows unauthenticated...

PT-2023-30595 · Timo Reith · Post Status Notifier Lite

Name of the Vulnerable Software and Affected Versions: Timo Reith Post Status Notifier Lite plugin versions = 1.11.0 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting. Recommendations: For Timo Reith Post Statu...

PT-2023-32474

Name of the Vulnerable Software and Affected Versions DECE Software Geodi versions prior to 8.0.0.27396 Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicio...

Email Security Flaw Found in the Wild

Googles Threat Analysis Group announced a zero-day against the Zimbra Collaboration email server that has been used against governments around the world. TAG has observed four different groups exploiting the same bug to steal email data, user credentials, and authentication tokens. Most of this...

MGASA-2023-0323 Fix u-boot reading file would overwrite reserved memory error

U-boot would not boot after upgrading to 2023.01 version on RPI 4/CM4 boards. Log would report: - Found EFI removable media binary efi/boot/bootaa64.efi - Reading file would overwrite reserved memory The updated package allows u-boot to load properly bootaa64.efi...

PT-2023-32211 · WordPress · Seraphinite Accelerator

Name of the Vulnerable Software and Affected Versions: Seraphinite Accelerator WordPress plugin versions prior to 2.2.29 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back i...

PT-2023-8597 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 6.3-milestone-2 through 14.10.14 XWiki Platform versions 15.5.0 through 15.5.0 XWiki Platform versions 15.6RC0 Description: The Solr-based search suggestion provider in XWiki Platform exposes the content of all documen...

PT-2023-30557 · Unknown · Gopi Ramasamy Vertical Scroll Recent Post

Name of the Vulnerable Software and Affected Versions: Gopi Ramasamy Vertical scroll recent post versions n/a through 14.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on...