PT-2023-5159 · Siemens · Tecnomatix Plant Simulation +2

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V14.3.0.1 Teamcenter Visualization V13.3 versions prior to V13.3.0.12 Teamcenter Visualization V14.0 all versions Teamcenter Visualization V14.1 versions prior to V14.1.0.11 Teamcenter Visualization V14.2 versions prio...

PT-2023-31069 · WordPress · Wp User Control

Name of the Vulnerable Software and Affected Versions: WP User Control plugin for WordPress versions up to, and including 1.5.3 Description: The issue arises from the plugin's use of native password reset functionality with insufficient validation on the password reset function in the WP User...

JVN#41113329: Pyramid vulnerable to directory traversal

Pyramid provided by Pylons Project, which is a web framework for Python, contains a directory traversal vulnerability CWE-22. Impact index.html located one directory above the location of the static view's file system path can be accessed via a crafted request. Solution Update the software Update...

PT-2023-5202

Name of the Vulnerable Software and Affected Versions Apache Commons Compress versions 1.22 through 1.23 Description The issue is related to uncontrolled resource consumption due to insufficient input validation when processing TAR archive headers. This can be exploited by a remote attacker to...

DSA-5493-1 open-vm-tools - security update

Bulletin has no description...

PT-2023-18738 · Samsung · Samsung Knox

Name of the Vulnerable Software and Affected Versions: Samsung Knox versions 2.8.60 and earlier Description: The issue allows an attacker to bypass the authentication process and gain access to the folder's contents. Recommendations: For versions 2.8.60 and earlier, update to a version later than...

PT-2023-26085 · Unknown · I-Doit Pro

Name of the Vulnerable Software and Affected Versions: i-doit Pro versions prior to v26 Description: The issue is related to path traversal. Recommendations: For versions prior to v26, update to a version above v25 to resolve the issue...

PT-2023-5379 · Isc +4 · Bind 9 +4

Name of the Vulnerable Software and Affected Versions: BIND 9 versions 9.18.0 through 9.18.18 BIND 9 versions 9.18.11-S1 through 9.18.18-S1 Description: A flaw in the networking code handling DNS-over-TLS queries may cause named to terminate unexpectedly due to an assertion failure. This happens...

HPESBGN04530 rev.2 - HPE OneView, Multiple Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Denial of Service DoS, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView - All versions prior to 6.60.05, 7.00.00, 7.10.00, 7.20.00, 8.00.00, 8.10.00, 8.20.00, 8.30.00, 8.40.00,...

Authentication flaw

A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or ...

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Access VPN Unauthorized Access Vulnerability

A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or ...

Cisco BroadWorks Application Delivery Platform and Xtended Services Platform Authentication Bypass Vulnerability

A vulnerability in the single sign-on SSO implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to forge the credentials required to access an affected system. This vulnerability is due to th...

CVE-2023-4589

Delinea Secret Server 10.9.000002 is affected by an insufficient verification of data authenticity vulnerability in its update mechanism. The root cause is that software updates lack digital signatures and do not validate update package integrity, allowing an attacker with administrator privilege...

Security Bulletin: NVIDIA Cumulus Linux - September 2023

NVIDIA has released a software update for NVIDIA Cumulus Linux. This update addresses security issues that may lead to information disclosure and denial of service. To protect your system, download and install the latest version of NVIDIA Cumulus Linux from the NVIDIA Enterprise Support Portal. G...

PT-2023-27906 · Frappe · Frappe

Name of the Vulnerable Software and Affected Versions: Frappe versions prior to 13.46.1 Frappe versions prior to 14.20.0 Description: A SQL Injection issue has been identified in the Frappe Framework, which could allow a malicious actor to access sensitive information. Recommendations: For versio...

PT-2023-22931 · Samsung · Samsung Email

Name of the Vulnerable Software and Affected Versions: Samsung Email versions prior to 6.1.82.0 Description: The issue allows a remote attacker to intercept network traffic, including sensitive information, due to improper certificate validation. Recommendations: For versions prior to 6.1.82.0,...

PT-2023-24983 · Panasonic · Panasonic Kw Watcher

Name of the Vulnerable Software and Affected Versions: Panasonic KW Watcher versions 1.00 through 2.82 Description: The issue is related to a use after free vulnerability, which may allow attackers to execute arbitrary code. Recommendations: For Panasonic KW Watcher versions 1.00 through 2.82,...

PT-2023-10314 · Aruba · Aruba Airwave

Name of the Vulnerable Software and Affected Versions: Aruba AirWave versions 7.7.14.1 and earlier Aruba AirWave versions 8.0.6 and earlier Description: The issue allows administrative users to escalate privileges to root on the underlying OS. Recommendations: For Aruba AirWave versions 7.7.14.1...

PT-2023-22917 · Svcagent · Svcagent

Name of the Vulnerable Software and Affected Versions: SVCAgent versions prior to SMR Sep-2023 Release 1 Description: The issue is related to improper access control, allowing attackers to trigger certain commands. Recommendations: For versions prior to SMR Sep-2023 Release 1, update to the SMR...

-pattern parameter in the rewrite action was removed in 13.1

When user configure rewrite action with pattern param in GUI or CLI in NS 13.1, below error may prompt:"ERRO: No such argument -pattern" e.g add rewrite action rwainsertintracaptchaag insertbeforeall "HTTP.RES.BODY8000.SETTEXTMODEIGNORECASE" q" " + "" -pattern "" ERROR: No such argument -pattern...