Fedora: Security Advisory for vim (FEDORA-2023-15c591bd6e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the software lies in the ability to increase the effective working time of components and equipment, as well as optimize resource utilization in the SAP 3D Visual Enterprise Viewer. This vulnerability stems from the possibility of writing data beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the software for increasing the effective working time of components and equipment, as well as optimizing resource usage in the SAP 3D Visual Enterprise Viewer, is related to the ability to write data beyond the buffer in memory. Exploiting this vulnerability allows a malicio...

Vulnerabilities of Microsoft .NET Framework, .NET software platforms, and Microsoft Visual Studio development tools, related to insufficient validation of input data, allow attackers to trigger service failures.

The vulnerabilities of Microsoft’s software platforms such as the .NET Framework and .NET, as well as Microsoft Visual Studio, are related to insufficient testing of input data. Exploiting these vulnerabilities can allow attackers to cause system failures...

The vulnerabilities of Microsoft’s software platforms such as the .NET Framework and .NET, as well as Microsoft Visual Studio, related to deficiencies in access control, allow attackers to escalate their privileges.

The vulnerabilities of Microsoft’s software platforms such as the .NET Framework, .NET, and the Microsoft Visual Studio development tools are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

The vulnerability of the Graphite Ashlar-Vellum automated drawing system lies in the ability to write beyond the buffer memory limit, allowing a malicious actor to execute arbitrary code.

The vulnerability of the Graphite Ashlar-Vellum drawing system is related to the writing beyond the buffer boundaries of the memory during the analysis of the VC6 file. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Graphite automated drawing system, related to writing beyond the buffer memory boundaries, allows a perpetrator to execute arbitrary code.

The vulnerability of the Graphite automated drawing system lies in the writing beyond the buffer memory boundaries during the analysis of the VC6 file. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Microsoft Patch Tuesday June 2023: Edge type confusion, Git RCE, OneNote Spoofing, PGM RCE, Exchange RCE, SharePoint EoP

Microsoft Patch Tuesday June 2023: Edge type confusion, Git RCE, OneNote Spoofing, PGM RCE, Exchange RCE, SharePoint EoP. Hello everyone! This episode will be about Microsoft Patch Tuesday for June 2023, including vulnerabilities that were added between May and June Patch Tuesdays. Alternative...

CVE-2023-32390

The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup...

CVE-2023-32390

The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup...

Authentication flaw

The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup...

CVE-2023-32390

The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup...

CVE-2023-32390

CVE-2023-32390 affects Apple devices where Photos in the Hidden Photos Album could be viewed without authentication via Visual Lookup. The issue stems from insufficient checks in the Photos/Visual Lookup flow, enabling access to hidden photos. Devices affected include iOS 16.5, iPadOS 16.5, watch...

The vulnerability of the Microsoft Visual Studio software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Microsoft Visual Studio software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Microsoft Visual Studio, a software development tool, and the Microsoft.NET platform allows attackers to enhance their privileges.

The vulnerability of Microsoft Visual Studio, a software development tool, and the Microsoft.NET platform is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Vulnerability of Microsoft .NET Framework, .NET software platforms, and Microsoft Visual Studio development tools, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of Microsoft’s software platforms such as the .NET Framework and .NET, as well as Microsoft Visual Studio, relates to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

WordPress ND Shortcodes For Visual Composer Plugin < 7.0 is vulnerable to Local File Inclusion

Software ND Shortcodes For Visual Composer Type Plugin Vulnerable versions 7.0 Fixed in 7.0 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2023-1273 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 0d5d6aec821b Credits Erwan LR WPScan Required...

CVE-2023-0368

The Responsive Tabs For WPBakery Page Builder formerly Visual Composer WordPress plugin through 1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to...

State-Backed Hackers Employ Advanced Methods to Target Middle Eastern and African Governments

Governmental entities in the Middle East and Africa have been at the receiving end of sustained cyber-espionage attacks that leverage never-before-seen and rare credential theft and Exchange email exfiltration techniques. "The main goal of the attacks was to obtain highly confidential and sensiti...

State-Backed Hackers Employ Advanced Methods to Target Middle Eastern and African Governments

Governmental entities in the Middle East and Africa have been at the receiving end of sustained cyber-espionage attacks that leverage never-before-seen and rare credential theft and Exchange email exfiltration techniques. "The main goal of the attacks was to obtain highly confidential and sensiti...

The vulnerability of Visual Studio Code’s source editor allows attackers to perform spoofing attacks.

The vulnerability of Visual Studio Code’s source editor is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...