CVE-2023-29983

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...

CVE-2023-30256

Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to obtain sensitive information via the back and emailcreate parameters in the AuthController.php file...

CVE-2023-27386

Uncontrolled search path in some IntelR Pathfinder for RISC-V software may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Uncontrolled search path in some IntelR Pathfinder for RISC-V software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-27386

Uncontrolled search path in some IntelR Pathfinder for RISC-V software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-27386

Uncontrolled search path in some IntelR Pathfinder for RISC-V software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-27386

CVE-2023-27386 involves an uncontrolled search path in some Intel® Pathfinder for RISC-V software that could allow an authenticated user to escalate privileges via local access. The connected Intel advisory (Intel® Pathfinder for RISC-V Advisory) confirms the affected product line and describes t...

Weston Embedded uC-FTPs PORT command parameter extraction out-of-bounds read vulnerability

Talos Vulnerability Report TALOS-2022-1681 Weston Embedded uC-FTPs PORT command parameter extraction out-of-bounds read vulnerability May 10, 2023 CVE Number CVE-2022-46377,CVE-2022-46378 SUMMARY An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of...

CVE-2023-30086

Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c...

CVE-2023-30086

Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c...

kernel: clocksource: hyper-v: unexport __init-annotated hv_init_clocksource()

In the Linux kernel, the following vulnerability has been resolved: clocksource: hyper-v: unexport init-annotated hvinitclocksource EXPORTSYMBOL and init is a bad combination because the .init.text section is freed up after the initialization. Hence, modules cannot use symbols annotated init. The...

CVE-2023-30087

Buffer Overflow vulnerability found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjsmkstring function in mjs.c...

CVE-2021-31240

The CVE-2021-31240 issue affects libming v0.4.8, where the parseSWF_IMPORTASSETS function in parser.c can be abused by a local attacker to execute arbitrary code. The vulnerability is locally exploitable with a low attack complexity and requires low privileges, with no user interaction, and has a...

CVE-2023-30088

An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjsexecute function in mjs.c...

CVE-2023-30086

Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c...

Intel® Pathfinder for RISC-V Advisory

Summary: A potential security vulnerability in some Intel® Pathfinder for RISC-V software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Intel® Pathfinder for RISC-V. Vulnerability...

CVE-2023-31489

An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgpcapabilityllgr function...

RXSA-2023:1566 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: stack overflow in doprocdointvec and procskipspaces CVE-2022-4378 ALSA: pcm: Move rwsem lock inside sndctlelemread to prevent UAF CVE-2023-0266 kernel: FUSE filesystem low-privileged user...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux SIG Cloud 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux...

Security fix for the ALT Linux 10 package git version 2.33.8-alt1

2.33.8-alt1 built May 2, 2023 Dmitry V. Levin in task 319522 April 17, 2023 Dmitry V. Levin - 2.33.7 - 2.33.8 fixes: CVE-2023-25652, CVE-2023-25815, CVE-2023-29007...