SUSE-SU-2023:2536-1 Security update for openvswitch3

This update for openvswitch3 fixes the following issues: - CVE-2023-1668: Fixed a remote denial of service that could be triggered via malformed IP packets bsc1210054...

PT-2023-24846 · Unknown · Zephyr Project Manager

Name of the Vulnerable Software and Affected Versions: Dylan James Zephyr Project Manager plugin versions = 3.3.93 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions...

PT-2023-22176 · Subnet · Subnet Powersystem Center

Name of the Vulnerable Software and Affected Versions: SUBNET PowerSYSTEM Center versions 2020 U10 and prior Description: The issue concerns replay attacks, which may lead to a denial-of-service condition or a loss of data integrity. Recommendations: For SUBNET PowerSYSTEM Center versions 2020 U1...

PT-2023-15075 · WordPress · Easy Media Replace

Name of the Vulnerable Software and Affected Versions: Easy Media Replace plugin versions prior to 0.1.4 Description: The issue is related to Broken Access Control, allowing Arbitrary File Deletion. Recommendations: For Easy Media Replace plugin versions prior to 0.1.4, update to version 0.1.4 or...

PT-2023-21109 · Everest Themes · Everest Themes Arya Multipurpose Theme

Name of the Vulnerable Software and Affected Versions: Everest Themes Arya Multipurpose theme versions 1.0.5 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...

HPESBGN04487 rev.1 - Insight Remote Support (I-RS), Disclosure of Privileged Information

Potential Security Impact: Local: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Insight Remote Support Standard Software 7.12 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2023-30904 |...

CVE-2023-34249

benjjvi/PyBB is an open source bulletin board. Prior to commit dcaeccd37198ecd3e41ea766d1099354b60d69c2, benjjvi/PyBB is vulnerable to SQL Injection. This vulnerability has been fixed as of commit dcaeccd37198ecd3e41ea766d1099354b60d69c2. As a workaround, a user may be able to update the software...

Sql injection

benjjvi/PyBB is an open source bulletin board. Prior to commit dcaeccd37198ecd3e41ea766d1099354b60d69c2, benjjvi/PyBB is vulnerable to SQL Injection. This vulnerability has been fixed as of commit dcaeccd37198ecd3e41ea766d1099354b60d69c2. As a workaround, a user may be able to update the software...

PT-2023-3210

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server versions prior to 16.0.10399.20005 Description This issue is an elevation of privilege vulnerability in Microsoft SharePoint Server that allows attackers to affect the system. The vulnerability enables remote...

PT-2023-24772 · Pybb · Pybb

Name of the Vulnerable Software and Affected Versions: benjjvi/PyBB versions prior to commit dcaeccd37198ecd3e41ea766d1099354b60d69c2 Description: The issue is related to SQL Injection. benjjvi/PyBB is an open source bulletin board. To avoid the problem, a user may update the software manually by...

APSB23-36 : Security update available for Adobe Animate

Adobe has released an update for Adobe Animate. This update resolves a critical vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

Siemens Solid Edge

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

SUSE-SU-2023:2483-1 Security update for openldap2

This update for openldap2 fixes the following issues: - CVE-2023-2953: Fixed null pointer deref in bermemallocx bsc1211795...

GHSA-2JX2-QCM4-RF9H Incomplete Internal State Distinction in GRPCWebToHTTP2ServerCodec

Impact Affected gRPC Swift servers are vulnerable to precondition failures when parsing certain gRPC Web requests. This may lead to a denial of service. Patches The problem has been fixed in 1.2.0. Workarounds No workaround is available. Users must upgrade...

PT-2023-3350 · Fortinet · Fortiadcmanager +1

Name of the Vulnerable Software and Affected Versions: FortiADC Manager versions prior to 7.1.0 FortiADC versions 7.0.0 through 7.1.2 FortiADC version 7.2.0 Description: The issue is related to the improper neutralization of special elements used in an operating system command, which can be...

MGASA-2023-0193 Updated python-flask packages fix security vulnerability

Client 'session' cookie sent to other clients CVE-2023-30861...

Cisco Secure Workload Authenticated OpenAPI Privilege Escalation Vulnerability

A vulnerability in the OpenAPI of Cisco Secure Workload could allow an authenticated, remote attacker with the privileges of a read-only user to execute operations that should require Administrator privileges. The attacker would need valid user credentials. This vulnerability is due to improper...

Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows Privilege Escalation Vulnerability

A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows could allow a low-privileged, authenticated, local attacker to elevate privileges to those of SYSTEM. The client update process is executed aft...

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 2100 Series Appliances SSL/TLS Denial of Service Vulnerability

A vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software for Cisco Firepower 2100 Series Appliances could allow an unauthenticated, remote attacker to cause an affected device to relo...

HPESBUX04483 rev.1 - HP-UX BIND, Multiple Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Multiple Vulnerabilities, Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX BIND 9.11.1 prior to C.9.11.1.6.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-25215 |...