Upgrading your Android device? Read this first

Last month, we wrote an article about what to do when upgrading your iPhone. Since then, we've received several requests to do a similar post about Android devices. Providing uniform and easy to follow instructions is a bit harder to do for Android, because there are many differences between make...

PT-2023-28039 · Unknown · Daext Live News

Name of the Vulnerable Software and Affected Versions: DAEXT Live News plugin versions = 1.06 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application...

Vulnerabilities fixed in Kofax Power PDF

Kofax has fixed vulnerabilities in Power PDF. A malicious person could exploit the vulnerabilities to execute arbitrary code with privileges of the victim, or to gain access to sensitive data. To do this, the malicious party must trick the victim into opening a malicious file to open, or follow a...

PT-2023-29161 · WordPress · Joakim Ling Remove Slug From Custom Post Type Plugin

Name of the Vulnerable Software and Affected Versions: Joakim Ling Remove slug from custom post type plugin versions 1.0.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintende...

PT-2023-29527 · Atos · Atos Unify Openscape Common Management Portal

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape Common Management Portal versions prior to V10 R4.17.0 Atos Unify OpenScape Common Management Portal versions prior to V10 R5.1.0 Description: The issue allows an authenticated attacker to execute arbitrary code on the...

DLA-3607-1 gnome-boxes - security update

Bulletin has no description...

DLA-3608-1 vinagre - security update

Bulletin has no description...

SUSE-SU-2023:3998-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2020-23804: Fixed uncontrolled recursion in pdfinfo and pdftops bsc1215422. - CVE-2020-36024: Fixed NULL Pointer Deference in FoFiType1C:convertToType1 bsc1214257. - CVE-2022-37050: Fixed denial-of-service via savePageAs in PDFDoc.c...

PT-2023-13231 · Ibm · Ibm Security Directory Suite Va

Name of the Vulnerable Software and Affected Versions: IBM Security Directory Suite version 8.0.1 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations: For IBM Security...

PT-2023-28748 · Milesight · Milesight Ur32L +3

Name of the Vulnerable Software and Affected Versions: Milesight UR5X, UR32L, UR32, UR35, UR41 versions prior to 35.3.0.7 Description: A cross-site scripting XSS issue was discovered in the admin panel of the affected devices. This issue allows for malicious scripts to be injected into the websit...

PT-2023-6496 · Dell · Dell Smartfabric Storage

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric Storage Software versions 1.4 and earlier Description: The issue is related to an OS Command Injection Vulnerability in the CLI of the Dell SmartFabric Storage Software. This vulnerability could allow an authenticated local...

Cisco IOx Application Hosting Environment Privilege Escalation Vulnerability

A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an authenticated, remote attacker to access the underlying operating system as the root user. This vulnerability exists because Docke...

PT-2023-32077 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.2.2-DEV Description: The issue is an out-of-bounds read in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.2.2-DEV, update to version 2.2.2-DEV or later to resolve the issue...

SUSE-SU-2023:3954-1 Security update for libeconf

This update for libeconf fixes the following issues: Update to version 0.5.2. - CVE-2023-30078, CVE-2023-32181: Fixed a stack-buffer-overflow vulnerability in 'econfwriteFile' function bsc1211078. - CVE-2023-30079, CVE-2023-22652: Fixed a stack-buffer-overflow vulnerability in 'readfile' function...

Medium: mutt

Issue Overview: Null pointer dereference when viewing a specially crafted email in Mutt 1.5.2 1.5.2 2.2.12 CVE-2023-4875 Affected Packages: mutt Issue Correction: Run dnf update mutt --releasever 2023.2.20231002 or dnf update --advisory ALAS2023-2023-357 --releasever 2023.2.20231002 to update you...

PT-2023-16553 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS version 7.67 and prior versions Description: A Cross-site Scripting XSS issue in the Syslog Section of Pandora FMS allows an attacker to transfer a user's cookie value to the attacker's server. Recommendations: For Pandora FMS...

PT-2023-26405 · Taboola · Taboola

Name of the Vulnerable Software and Affected Versions: Taboola plugin versions = 2.0.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that t...

PT-2023-22891 · Evaluator · Evaluator

Name of the Vulnerable Software and Affected Versions: Evaluator versions prior to SMR Oct-2023 Release 1 Description: The issue is related to improper input validation, allowing local attackers to launch privileged activities. This can be exploited by local attackers. Recommendations: For versio...

PT-2023-27320 · WordPress · Futurio Extra

Name of the Vulnerable Software and Affected Versions: FuturioWP Futurio Extra plugin versions 1.8.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows the activation of arbitrary plugins. This can be exploited by tricking a user into performing...

PT-2023-5991 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-beta1 and earlier Adobe Commerce versions 2.4.6-p2 and earlier Adobe Commerce versions 2.4.5-p4 and earlier Adobe Commerce versions 2.4.4-p5 and earlier Description: The issue is related to an Improper...