Category: Advisories

The /device/signin end-point for the Ourphoto App version 1.4.1 discloses clear-text password information for functionality within the picture frame devices. The deviceVideoCallPassword and mqttPassword are...

The user_token authorization header on the Ourphoto App version 1.4.1 /apiv1/* end-points is not implemented properly. Removing the value causes all requests to succeed, bypassing...

The /device/acceptBind end-point for Ourphoto App version 1.4.1 does not require authentication or authorization. The user_token header is not implemented or present on this end-point....

Behzad Najjarpour Jabbari discovered that HarfBuzz incorrectly handled certain inputs. A remote attacker could possibly use this issue to cause a denial of service. Read...

FEDORA-2022-cb7084ae1c Packages in this update: moodle-3.11.11-1.fc35 Update description: Fixes for multiple CVEs Read More

FEDORA-2022-f7fdcb1820 Packages in this update: moodle-3.11.11-1.fc36 Update description: Fixes for multiple CVEs Read More

FEDORA-2022-74a9c8e95f Packages in this update: moodle-4.1-1.fc37 Update description: Fixes for multiple CVEs Read More

USN-5689-1 fixed a vulnerability in Perl. This update provides the corresponding update for Ubuntu 22.10. Original advisory details: It was discovered that Perl incorrectly handled...

Velneo vClient on its 28.1.3 version, could allow an attacker with knowledge of the victims's username and hashed password to spoof the victim's id against...

Florian Weimer discovered that shadow was not properly copying and removing user directory trees, which could lead to a race condition. A local attacker could...