Evgeny Legerov reported a heap-based buffer overflow vulnerability in
the inflate operation in zlib, which could result in denial of service
or potentially the execution of arbitrary code if specially crafted
input is processed.
An issue was discovered in Kirby 2.5.12. The delete page functionality suffers from a CSRF flaw. A remote attacker can craft a malicious CSRF page and force the user to delete a page.
An issue was discovered in Kirby 2.5.12. The application allows malicious HTTP requests to be sent in order to trick a user into adding web pages.
[R1] Nessus Agent Version 8.3.4 Fixes Multiple Vulnerabilities
Arnie Cabral
Wed, 08/24/2022 – 12:18
1. CVE-2022-32973 – An authenticated attacker could create an audit file that bypasses PowerShell cmdlet checks and executes commands with administrator privileges.
2. CVE-2022-32974 – An authenticated attacker could read arbitrary files from the underlying operating system of the scanner using a custom crafted compliance audit file without providing any valid SSH credentials.
Additional details on the custom audit signing functionality can be found here: https://community.tenable.com/s/article/Audit-Signing-Overview
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
firefox-104.0-5.fc35
Firefox 104.0 release. For details, see https://www.mozilla.org/en-US/firefox/104.0/releasenotes/
firefox-104.0-5.fc36
Firefox 104.0 release. For details, see https://www.mozilla.org/en-US/firefox/104.0/releasenotes/
firefox-104.0-5.fc37
Firefox 104.0 release. For details, see https://www.mozilla.org/en-US/firefox/104.0/releasenotes/
pdns-recursor-4.6.3-1.fc36
Security fix for CVE-2022-37428
firefox-stable-3620220823164227.1
Firefox 104.0 release. For details, see https://www.mozilla.org/en-US/firefox/104.0/releasenotes/
