This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
Daily Archives: February 21, 2024
ZDI-24-191: Schneider Electric EcoStruxure IT Gateway Hard-Coded Credentials Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Schneider Electric EcoStruxure IT Gateway. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2024-0865.
ZDI-24-192: Schneider Electric EcoStruxure IT Gateway Hard-Coded Credentials Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Schneider Electric EcoStruxure IT Gateway. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-0865.
ZDI-24-183: Apache OFBiz createRegister Error Message Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apache OFBiz. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.3. The following CVEs are assigned: CVE-2024-23946.
gifsicle-1.95-1.el9
FEDORA-EPEL-2024-bd2367203c
Packages in this update:
gifsicle-1.95-1.el9
Update description:
Update to 1.95
gifsicle-1.95-1.el8
FEDORA-EPEL-2024-109c5d3d12
Packages in this update:
gifsicle-1.95-1.el8
Update description:
Update to 1.95
gifsicle-1.95-1.fc38
FEDORA-2024-4672c1ff2d
Packages in this update:
gifsicle-1.95-1.fc38
Update description:
Update to 1.95
gifsicle-1.95-1.fc39
FEDORA-2024-5e50570506
Packages in this update:
gifsicle-1.95-1.fc39
Update description:
Update to 1.95
DSA-5627-1 firefox-esr – security update
Multiple security issues have been found in the Mozilla Firefox web
browser, which could potentially result in the execution of arbitrary
code, information disclosure or spoofing.