Moderate: Red Hat Security Advisory: mariadb:10.5 security, bug fix, and enhancement update

An update for the mariadb:10.5 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RLSA-2022:1557 Moderate: mariadb:10.5 security, bug fix, and enhancement update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: mariadb 10.5.13, galera 26.4.9. BZ2050546 Security Fixes: mysql: Server: DML unspecified vulnerability CPU Apr 2021 CVE-2021-215...

CVE-2021-39078

IBM Security Guardium 10.5 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 215589...

CVE-2021-39078

CVE-2021-39078 affects IBM Security Guardium 10.5, with credentials stored in plain text accessible to a local privileged user. The IBM Security Guardium remediation/patches cover multiple versions (10.5, 10.6, 11.0, 11.1, 11.2, 11.3, 11.4); apply the fixes via IBM FixCentral as listed (e.g., Sql...

CVE-2021-39076

IBM Security Guardium 10.5 and 11.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 215585...

GitLab <= 10.3.7, 10.4.x - 10.4.4, 10.5.x - 10.5.4 Improper Input Validation Vulnerability

GitLab is prone to an improper input validation vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if...

PT-2022-12987 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 10.5 to 14.5.4 GitLab versions 14.6 to 14.6.4 GitLab versions 14.7 to 14.7.1 Description: A vulnerability was discovered in GitLab, making it susceptible to a blind Server-Side Request Forgery SSRF attack. This issue is...

GitLab 9.2.x - 10.4.6, 10.5.x - 10.5.6, 10.6.x - 10.6.2 XSS Vulnerability

GitLab is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if...

USN-5305-1: MariaDB vulnerabilities

Several security issues were discovered in MariaDB and this update includes new upstream MariaDB versions to fix these issues. MariaDB has been updated to 10.3.34 in Ubuntu 20.04 LTS and to 10.5.15 in Ubuntu 21.10. In addition to security fixes, the updated packages contain bug fixes, new feature...

IBM DB2 9.7 < 9.7.0 FP11 40985 / 10.1 < 10.1.0 FP6 40986 / 10.5 < 10.5.0 FP11 40988 / 11.1 < 11.1.4 FP6 40997 / 11.5 < 11.5.7 Information Disclosure (Unix)

According to its self-reported version number, IBM Db2 is affected by multiple vulnerabilities: - IBM Db2 is affected by an information disclosure vulnerability when using the LOAD utility as under certain circumstances the LOAD utility does not enforce directory restrictions. CVE-2021-20373 - IB...

MariaDB DoS Vulnerability (MDEV-25629) - Linux

MariaDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if...

Design/Logic Flaw

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unauthorized external users could perform Server Side Requests via the CI Lint API...

Ubuntu: Security Advisory (USN-5170-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MariaDB Multiple Vulnerabilities (Jul/Nov 2021) - Windows

MariaDB is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if description...

Cross site scripting

IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, and 11.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Security Bulletin: IBM Security Guardium is affected by the following vulnerabilities ( CVE-2021-29773, CVE-2021-2161)

Summary IBM Security Guardium has fixed these vulnerabilities Vulnerability Details CVEID: CVE-2021-29773 DESCRIPTION: IBM Security Guardium could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure direct object vulnerability IDOR...

Security Bulletin: IBM Security Guardium is affected by an SQLite vulnerability

Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2019-1551 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an overflow in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli. By...

Security Bulletin: Multiple IBM Db2 Server Vulnerabilities Affect IBM Emptoris Program Management

Summary Multiple IBM Db2 Server vulnerabilities affect IBM Emptoris Program Management. Vulnerability Details CVEID: CVE-2021-20579 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user who can create a view or inline SQL...

CEM Systems AC2000 安全漏洞

CEM Systems AC2000 is a UK based access control and security management system. A security vulnerability exists in CEM Systems AC2000 versions 10.1 to 10.5, which arises from the fact that in some cases the application does not perform proper authorization checks for functions that require proof ...

Security Bulletin: IBM Security Guardium is affected by an Information Exposure vulnerability (CVE-2020-4189)

Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2020-4189 DESCRIPTION: IBM Security Guardium discloses sensitive information in the response headers that could be used in further attacks against the system. CVSS Base score: 4.3 CVSS Temporal Score: See:...