CVE-2023-0813

CVE-2023-0813 affects the OpenShift Network Observability Console plugin. A flaw occurs when the Loki authToken configuration is not set to FORWARD; authentication is not enforced, allowing any user who can access the OpenShift Console to retrieve flows without authentication. Affected component:...

openSUSE 15 Security Update : phpMyAdmin (openSUSE-SU-2023:0047-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0047-1 advisory. - PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the lan...

CVE-2023-0813

A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced, allowing any user who can connect to the OpenShift Console in an OpenShift cluster to retrieve flows without...

Important: Red Hat Security Advisory: Network observability 1.1.0 security update

Network observability 1.1.0 release for OpenShift Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

MSC-2022-0813

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

UBUNTU-CVE-2022-0813

PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the lang parameter, the pmaparameter, and the cookie section...

CVE-2022-0813

CVE-2022-0813 affects PhpMyAdmin up to version 5.1.1 where an information disclosure can occur by crafting invalid requests that touch the lang parameter, the pma_parameter, and the cookie section. Exploitation could reveal potentially sensitive information. Linked advisories (openSUSE/SUSE GLSA,...

CVE-2022-0813

PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the lang parameter, the pmaparameter, and the cookie section...

Mageia: Security Advisory (MGASA-2015-0131)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MSC-2021-0813

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

SUSE: Security Advisory (SUSE-SU-2015:0706-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:0813-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-0813

CVE-2020-0813 (ChakraCore) is a memory-information-disclosure vulnerability in the Chakra scripting engine. The issue arises when Chakra improperly discloses the contents of memory, enabling an attacker to access memory data from objects whose creation address is known. The vulnerability is addre...

KLA11681 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in Scripting Engine can be exploited remotely to...

Mozilla Firefox ESR < 31.6 Multiple Vulnerabilities

Binary data 701254.prm...

Denial Of Service (DoS)

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

CVE-2019-0813

CVE-2019-0813 is a Windows Admin Center elevation of privilege vulnerability revealed across multiple vendors/feeds. It arises when Windows Admin Center improperly impersonates operations, enabling an attacker with unprivileged access to gain elevated privileges. Remediation is via the March 2019...

Security Bulletin: Open Source Mozilla Firefox vulnerability in IBM Storwize V7000 Unified (CVE-2015-0801, CVE-2015-0807, CVE-2015-0813, CVE-2015-0815, CVE-2015-0816,CVE-2015-0817, CVE-2015-0818, CVE-2015-2708, CVE-2015-2709)

Summary A fix is available for IBM Storwize V7000 Unified, for the Open Source Mozilla Firefox security vulnerabilities found in March 2015. Vulnerability Details IBM Storwize V7000 Unified is shipped with Mozilla Firefox .There are vulnerabilities in certain versions of Mozilla Firefox shipped i...

Security Bulletin: Open Source Mozilla Firefox vulnerability in IBM SONAS (CVE-2015-0801, CVE-2015-0807, CVE-2015-0813, CVE-2015-0815, CVE-2015-0816,CVE-2015-0817, CVE-2015-0818, CVE-2015-2708, CVE-2015-2709)

Summary A fix is available for IBM SONAS, for the Open Source Mozilla Firefox security vulnerabilities found inMarch 2015. Vulnerability Details IBM SONAS is shipped with Mozilla Firefox.There are vulnerabilities in certain versions of Mozilla Firefox shipped in certain versions of IBM SONAS. Thi...

Windows Kernel 64-bit pool memory disclosure in win32k!UMPDOBJ::LockSurface(CVE-2018-0813)

We have discovered that the win32k!UMPDOBJ::LockSurface function discloses portions of uninitialized pool memory to user-mode clients. The bug was encountered on Windows 7 64-bit; other versions were not tested. The leak was detected in the context of the splwow64.exe process, under the following...