210 matches found
CVE-2022-41723 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, grpcurl, dynamic-localpv-provisioner-fips, kube-state-metrics, restic, k3d, dynamic-localpv-provisioner, kubeflow, wireguard-go, terraform-provider-sendgrid, gke-gcloud-auth-plugin, hey, go, kubeflow-fips, kubeflow-katib...
GHSA-VVPX-J8F3-3W6H vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, grpcurl, dynamic-localpv-provisioner-fips, kube-state-metrics, restic, k3d, dynamic-localpv-provisioner, kubeflow, wireguard-go, terraform-provider-sendgrid, gke-gcloud-auth-plugin, hey, go, kubeflow-fips, kubeflow-katib...
SUSE CVE-2021-37750
The Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/dotgsreq.c via a FAST inner body that lacks a server field...
CVE-2021-4314
It is possible to manipulate the JWT token without the knowledge of the JWT secret and authenticate without valid JWT token as any user. This is happening only in the situation when zOSMF doesn’t have the APAR PH12143 applied. This issue affects: 1.16 versions to 1.19. What happens is that the...
CVE-2021-4314
It is possible to manipulate the JWT token without the knowledge of the JWT secret and authenticate without valid JWT token as any user. This is happening only in the situation when zOSMF doesn’t have the APAR PH12143 applied. This issue affects: 1.16 versions to 1.19. What happens is that the...
CVE-2021-4314
It is possible to manipulate the JWT token without the knowledge of the JWT secret and authenticate without valid JWT token as any user. This is happening only in the situation when zOSMF doesn’t have the APAR PH12143 applied. This issue affects: 1.16 versions to 1.19. What happens is that the...
SUSE-SU-2022:4054-1 Security update for go1.19
This update for go1.19 fixes the following issues: Update to go 1.19.3 released 2022-11-01 bsc1200441: Security fixes: - CVE-2022-41716: Fixed unsanitized NUL in environment variables in syscalls, os/exec go56327 bsc1204941. Bugfixes: - runtime: lock count' fatal error when cgo is enabled go56308...
CVE-2022-36045
NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. It utilizes web sockets for instant interactions and real-time notifications. utils.generateUUID, a helper function available in essentially all versions of NodeBB as far back as v1.0.1 and...
PT-2022-11523 · Ping Identity · Pingid Android App +1
Name of the Vulnerable Software and Affected Versions: PingID Android app versions prior to 1.19 Description: The issue is related to a misconfiguration of RSA in the PingID Android app, which makes it vulnerable to pre-computed dictionary attacks. This vulnerability can lead to an offline MFA...
Ping Identity Android App 安全特征问题漏洞
Ping Identity Android App is a mobile app for authentication from Ping Identity. A security vulnerability exists in Ping Identity Android App versions prior to 1.19 that stems from an RSA misconfiguration that is vulnerable to a pre-computed dictionary attack, resulting in bypassing the offline M...
numpy: buffer overflow in the array_from_pyobj() in fortranobject.c
Buffer overflow in the arrayfrompyobj function of fortranobject.c in NumPy 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task...
PT-2022-14824 · Jenkins · Jenkins Matrix Project Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Matrix Project Plugin versions 1.19 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because the plugin does not escape HTML metacharacters in node and label names, and label...
AZL-7056 CVE-2021-41496 affecting package numpy for versions less than 1.22.0-1
Buffer overflow in the arrayfrompyobj function of fortranobject.c in NumPy 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be...
CVE-2021-41495
Null Pointer Dereference vulnerability exists in numpy.sort in NumPy < and 1.19 in the PyArrayDescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error ca...
PYSEC-2021-857
Buffer overflow in the arrayfrompyobj function of fortranobject.c in NumPy 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values...
CVE-2021-41495
Null Pointer Dereference vulnerability exists in numpy.sort in NumPy < and 1.19 in the PyArrayDescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error ca...
PYSEC-2021-856
Null Pointer Dereference vulnerability exists in numpy.sort in NumPy < and 1.19 in the PyArrayDescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays...
NumPy 安全漏洞
NumPy is a Python scientific computing package. The product supports a large number of dimensional array and matrix calculations, as well as providing a large library of mathematical functions for data operations. A security vulnerability exists in NumPy prior to 1.19, which stems from a buffer...
PT-2021-7918
Name of the Vulnerable Software and Affected Versions NumPy versions prior to 1.19 Description The issue is related to a Null Pointer Dereference vulnerability in the numpy.sort component of NumPy, specifically in the PyArray DescrNew function due to missing return-value validation. This allows...