Ubuntu Security Notice 6177-1 - It was discovered that Jettison incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service.
e6cdd0e3d0c42bbb014bdc13a1b95610164b58d458c37f074c4a71dbb1318c04BBoard Forum version 1.0 suffers from a persistent cross site scripting vulnerability.
dc249565999752f20ea8b2f1218967c74c729e1f369ae61f7429b321375e6852Red Hat Security Advisory 2023-3662-01 - The c-ares C library defines asynchronous DNS requests and provides name resolving API. Issues addressed include a denial of service vulnerability.
c47f3f8f3d3487557786186920d8a97082e33197daf8c53bbc9c079d8e9775cbThe automatic and mandatory-by-default reordering of OpenBSD kernels is not transactional and as a result, a local unpatched exploit exists which allows tampering or replacement of the kernel. Arbitrary build artifacts are cyclically relinked with no data integrity or provenance being maintained or verified for the objects being consumed with respect to the running kernel before and during the execution of the mandatory kernel_reorder process in the supplied /etc/rc and /usr/libexec scripts. The reordering occurs at the end of installation process and also automatically every reboot cycle thereafter unless manually bypassed by a knowledgeable party.
534646964f9d44726bd9728ee38202f8b55ff1b1f54a3ede253500cd6b4fd5e5Ubuntu Security Notice 6083-2 - USN-6083-1 fixed a vulnerability in cups-filters. This update provides the corresponding update for Ubuntu 16.04 LTS. It was discovered that cups-filters incorrectly handled the beh CUPS backend. A remote attacker could possibly use this issue to cause the backend to stop responding or to execute arbitrary code.
decceef457557adefac9c1f13424abd0b5b135ee95bf421d4386ad76aa1ef601WG Ticket version 1.0 suffers from a cross site scripting vulnerability.
faf095088f9104bc00317ee339ff7cb6a4aa94bec60668a0a071f805292b077bDiafan CMS version 6.0 suffers from a cross site scripting vulnerability.
d28b123e05c68accec03212f6dbf13028216a8c3f4da7358b4db6889a78d4ae4WordPress Abandoned Cart Lite for WooCommerce plugin versions 5.14.2 and below suffer from an authentication bypass vulnerability.
0d0d222d7e4479afba078b42457efd1a3419d37ce0e5e13dc9d76da2989c29b7Ubuntu Security Notice 6166-2 - USN-6166-1 fixed a vulnerability in libcap2. This update provides the corresponding update for Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. Richard Weinberger discovered that libcap2 incorrectly handled certain long input strings. An attacker could use this issue to cause libcap2 to crash, resulting in a denial of service, or possibly execute arbitrary code.
9d3ef7276e2ceeb88a0d8282a8238d902c361649bf8b40434cc484189e0d822bCoursela Personal Course Selling Website version 1.0 suffers from a cross site scripting vulnerability.
bf0a2b9e36953184847c03c107b7df1c01cb247ba0a30c2cd82bfeca10b9a004Ubuntu Security Notice 6170-1 - It was discovered that Podman incorrectly handled certain images. An attacker could possibly use this issue to pull an untrusted image.
8d5b1f07e88ff6fd5801d4bd48eb63b00cc0aa6bd4a91b124eb68a8f9bea5348Ubuntu Security Notice 6176-1 - It was discovered that PyPDF2 incorrectly handled certain PDF files. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to consume system resources, resulting in a denial of service.
79e8fa08d70b3be94d258d760d8e952d77f635676c8411c4e217670463df35baUbuntu Security Notice 6167-1 - It was discovered that QEMU did not properly manage the guest drivers when shared buffers are not allocated. A malicious guest driver could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 22.10. It was discovered that QEMU did not properly check the size of the structure pointed to by the guest physical address pqxl. A malicious guest attacker could use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 22.10.
2cba75998a8cdb78ec32d167bfb012d5f0977f37e53d09a890bb6240045f9e0cUbuntu Security Notice 6175-1 - Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. Gwangun Jung discovered that the Quick Fair Queueing scheduler implementation in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code.
8d2750e78e3f34d550c35335528e9e223f031e2f6d9e0cec905fe85512526c34Ubuntu Security Notice 6174-1 - Jordy Zomer and Alexandra Sandulescu discovered that the Linux kernel did not properly implement speculative execution barriers in usercopy functions in certain situations. A local attacker could use this to expose sensitive information. It was discovered that the Human Interface Device support driver in the Linux kernel contained a type confusion vulnerability in some situations. A local attacker could use this to cause a denial of service.
632d3906a0b0a2c1d622d79dd45d89336eac42d43ef982f2319c70909610cfdaThe expressiveness of Turing-complete blockchains implies that verifying a transaction's validity requires executing it on the current blockchain state. Transaction fees are designed to compensate actors for resources expended on transactions, but can only be charged from transactions included in blocks. In this work, the authors show that adversaries can craft malicious transactions that decouple the work imposed on blockchain actors from the compensation offered in return by introducing three attacks.
68b4adbac9a02de43d43f0c0b285dc603d363d3be1f6185ba4fe1c00129c1969Red Hat Security Advisory 2023-3661-01 - The texlive packages contain TeXLive, an implementation of TeX for Linux or UNIX systems. Issues addressed include a code execution vulnerability.
b57a94a77de0cc294afe761935aead5aa0fd9cbbb2d78bb8ae38e05dbb984ad6Coursemat Multi-Tenant Course Selling Website version 1.1 suffers from a cross site scripting vulnerability.
1675530982c8312aec9a4f69a1b1a5f0549783510f0a0afc83436b648c577b48Red Hat Security Advisory 2023-3660-01 - The c-ares C library defines asynchronous DNS requests and provides name resolving API. Issues addressed include a denial of service vulnerability.
22d290497bf4243b478e6c25a13228fe5466ce6572796b1d1e2a838680a094fbRed Hat Security Advisory 2023-3664-01 - Release of Security Advisory for the OpenShift Jenkins image and Jenkins agent base image.
dd336c3e2dc2db105e105127e1f2bbf79335a56f544ed3b31f07727c470cb571SystemK NVR 504/508/516 version 2.3.5SK.30084998 suffer from a command injection vulnerability.
37a7b108e668514d1272b2bf9db799ba455aa98492cd85a4122f6c4264b40362Debian Linux Security Advisory 5432-1 - Jurien de Jong discovered that the parsing of KeyInfo elements within the XMLTooling library may result in server-side request forgery.
ee24cc1357858942fea5c788b259b57c1d2a84475e1c2cef5e274f0ca2153603elearning-SES version 1.0 suffers from a remote SQL injection vulnerability.
14b449fd53fdd997460c193401cb6fb035f4356904c022ae14d1a17de6489ce9RentEquip Multipurpose Rental version 1.0 suffers from a cross site scripting vulnerability.
1fd5f42ae4fc24efbe648ebf14610f1b332a7409d04419da5876b0ffbfd52961Polycom BToE Connector version 4.4.0.0 suffers from remote buffer overflow and man-in-the-middle vulnerabilities.
0474731c83a965e64f56d5999635c45783ba6863f131c036afacdc28c4204b05
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed