CVE-2023-34971

An inadequate encryption strength vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to decrypt the data using brute force attacks via unspecified vectors. We have already fixed the vulnerability in the following...

SUSE: Security Advisory (SUSE-SU-2023:3399-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2023 : runc (ALAS2023-2023-311)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-311 advisory. The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to...

PT-2023-27694 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version US AC8V4.0si V16.03.34.06 cn Description: A stack overflow issue was discovered via the parameter list at the "/goform/SetNetControlList" API endpoint. This issue affects the Tenda AC8 router. Recommendations: For Tenda AC8...

Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2023-308)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-308 advisory. 2023-10-11: The severity level was changed from Important to Medium. Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fi...

Apache Airflow Session Fixation vulnerability

The session fixation vulnerability allowed the authenticated user to continue accessing Airflow webserver even after the password of the user has been reset by the admin - up until the expiry of the session of the user. Other than manually cleaning the session database for database session backen...

SUSE-SU-2023:3397-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. bsc1213853 - Don't pass zero length input to EVPCipher because s390x assembler optimized AES cannot handle zero size. bsc1213517...

PT-2023-11599 · Nasm +1 · Nasm +1

Name of the Vulnerable Software and Affected Versions: nasm version 2.15rc0 Description: The issue is related to a Buffer Overflow vulnerability in the scan function in stdscan.c. This vulnerability allows remote attackers to cause a denial of service via crafted asm files. Recommendations: For...

CVE-2023-27576

An issue was discovered in phpList before 3.6.14. Due to an access error, it was possible to manipulate and edit data of the system's super admin, allowing one to perform an account takeover of the user with super-admin permission. Specifically, for a request with updatepassword=1, a modified...

PT-2023-4462 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to an information disclosure vulnerability. It may allow a remote attacker to disclose protected information. Recommendations: At the moment, ther...

SUSE-SU-2023:3328-1 Security update for pcre2

This update for pcre2 fixes the following issues: - CVE-2022-41409: Fixed integer overflow vulnerability in pcre2test that allows attackers to cause a denial of service via negative input bsc1213514...

USN-6258-1: LLVM Toolchain vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that LLVM Toolchain did not properly manage memory under certain circumstances. If a user were tricked into opening a specially crafted MLIR file, an attacker could possibly use this iss...

OPENSUSE-SU-2023:0222-1 Security update for perl-HTTP-Tiny

This update for perl-HTTP-Tiny fixes the following issues: perl-HTTP-Tiny was updated to 0.086: see /usr/share/doc/packages/perl-HTTP-Tiny/Changes 0.086 2023-06-22 10:06:37-04:00 America/NewYork - Fix code to use $ENVPERLHTTPTINYSSLINSECUREBYDEFAULT as documented. 0.084 2023-06-14 06:35:01-04:00...

CVE-2022-22646

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.2. A malicious application may be able to modify protected parts of the file system...

CVE-2022-22646

CVE-2022-22646 affects macOS Monterey 12.2, where a malicious application could modify protected parts of the file system. The issue was mitigated by removing the vulnerable code and is fixed in macOS Monterey 12.2. The primary affected component is part of the system’s file-management flow; no e...

PT-2023-18021 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a permissions bypass in the LockSettingsActivity.java file, allowing a new lockscreen PIN to be set without entering the existing PIN. This could lead to local...

OESA-2023-1504 bouncycastle security update

The package is organised so that it contains a light-weight API suitable for use in any environment including the newly released J2ME with the additional infrastructure to conform the algorithms to the JCE framework. Security Fixes: Bouncy Castle For Java before 1.74 is affected by an LDAP...

PT-2023-22269 · Texas Instruments · Wilink8-Wifi-Mcp8

Name of the Vulnerable Software and Affected Versions: WILINK8-WIFI-MCP8 versions 8.5 SP3 and earlier Description: The Texas Instruments TI WiLink WL18xx MCP driver does not limit the number of information elements IEs of type XCC EXT 1 IE ID or XCC EXT 2 IE ID that can be parsed in a management...

PT-2023-24660 · Intel · Intel Nuc Bios Firmware

Name of the Vulnerable Software and Affected Versions: IntelR NUC BIOS firmware affected versions not specified Description: The issue is related to improper input validation in the IntelR NUC BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via local...

PT-2023-24832 · Intel · Intel Nuc Bios Firmware

Name of the Vulnerable Software and Affected Versions: IntelR NUC BIOS firmware affected versions not specified Description: A race condition in the IntelR NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. Recommendations: At the moment,...