Packet Storm

WBiz Desk version 1.2 suffers from a remote SQL injection vulnerability.

hyiplab version 2.1 leaves a default set of administrative credentials installed post installation.

Esg version 2.5 suffers from a remote SQL injection vulnerability.

Code Bakers version 1.0 suffers from a remote SQL injection vulnerability.

Ubuntu Security Notice 6092-1 - Jordy Zomer and Alexandra Sandulescu discovered that the Linux kernel did not properly implement speculative execution barriers in usercopy functions in certain situations. A local attacker could use this to expose sensitive information. Xingyuan Mo discovered that the x86 KVM implementation in the Linux kernel did not properly initialize some data structures. A local attacker could use this to expose sensitive information.

CiviCRM version 5.59.alpha1 suffers from a persistent cross site scripting vulnerability.

Red Hat Security Advisory 2023-3167-01 - New Red Hat build of Cryostat 2.3.0 on RHEL 8 container images have been released, adding a variety of features and bug fixes. Issues addressed include a denial of service vulnerability.

ChurchCRM version 4.5.4 suffers from a cross site scripting vulnerability. Related CVE number: CVE-2023-31699.

Ubuntu Security Notice 6091-1 - It was discovered that some AMD x86-64 processors with SMT enabled could speculatively execute instructions using a return address from a sibling thread. A local attacker could possibly use this to expose sensitive information. Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service.

MobileTrans version 4.0.11 suffers from having a weak service permission vulnerability.