PT-2023-26614 · Follett · Follet School Solutions Destiny

Name of the Vulnerable Software and Affected Versions: Follet School Solutions Destiny versions 20 0 1 AU4 and later Description: The issue allows a remote attacker to run arbitrary code via the "presentonesearchresultsform.do" API endpoint. This enables the execution of arbitrary code, potential...

OPENSUSE-SU-2021:0397-1 Security update for mbedtls

This update for mbedtls fixes the following issues: - mbedtls was updated to version 2.16.9 - CVE-2020-10932: Fixed side channel in ECC code that allowed an adversary with access to precise enough timing and memory access information typically an untrusted operating system attacking a secure...