6169 matches found
java-17-openjdk security, bug fix, and enhancement update
An update is available for java-17-openjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-17-openjdk packages provide the OpenJDK 17 Java Runtime...
AZL-10328 CVE-2021-33458 affecting package yasm 1.3.0-17
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in findcc in modules/preprocs/nasm/nasm-pp.c...
AZL-35370 CVE-2021-33460 affecting package yasm 1.3.0-17
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in ifcondition in modules/preprocs/nasm/nasm-pp.c...
AZL-35366 CVE-2021-33456 affecting package yasm 1.3.0-17
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in hash in modules/preprocs/nasm/nasm-pp.c...
AZL-35372 CVE-2021-33462 affecting package yasm 1.3.0-17
An issue was discovered in yasm version 1.3.0. There is a use-after-free in exprtraversenodespost in libyasm/expr.c...
AZL-10329 CVE-2021-33459 affecting package yasm 1.3.0-17
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in nasmparserdirective in modules/parsers/nasm/nasm-parse.c...
DSA-5192-1 openjdk-17 - security update
Bulletin has no description...
HTTP Host Header Attack Vulnerabilities
The package laminas/laminas-diactoros Diactoros is a PSR-7 HTTP Message and PSR-17 HTTP Message Factory implementation, providing HTTP request and response message representations both for making HTTP client requests and responding to HTTP requests server-side. When responding to an incoming...
GHSA-MHXJ-85R3-2X55 file-type vulnerable to Infinite Loop via malformed MKV file
An issue was discovered in the file-type package from 13.0.0 until 16.5.4 and 17.x before 17.1.3 for Node.js. A malformed MKV file could cause the file type detector to get caught in an infinite loop. This would make the application become unresponsive and could be used to cause a DoS attack when...
Amazon Linux 2 : java-17-amazon-corretto (ALAS-2022-1824)
The version of java-17-amazon-corretto installed on the remote host is prior to 17.0.4+8-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1824 advisory. Generated code produced by C1 may leak a package-private class to a class from a different package...
Oracle OpenJDK Unspecified Vulnerability (Jul 2022)
Oracle OpenJDK is prone to an unspecified vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
Amazon Corretto Java 17.x < 17.0.4.8.1 Multiple Vulnerabilities
The version of Amazon Corretto installed on the remote host is prior to 17 17.0.4.8.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-17-2022-Jul-19 advisory. - hotspot/compiler CVE-2022-21540 - hotspot/runtime CVE-2022-21541 - core-libs/java.util...
lawans.com Cross Site Scripting vulnerability OBB-2791549
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
bpo.gr.jp Cross Site Scripting vulnerability OBB-2790223
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-31142
creationtimestamp| type| source ---|---|--- 2022-07-17 16:01:49+00:00| seen| https://t.me/cibsecurity/46271...
CVE-2022-2133
creationtimestamp| type| source ---|---|--- 2022-07-17 14:27:59+00:00| seen| https://t.me/cibsecurity/46399...
CVE-2022-2187
creationtimestamp| type| source ---|---|--- 2022-07-17 14:27:54+00:00| seen| https://t.me/cibsecurity/46397...
CVE-2022-2118
creationtimestamp| type| source ---|---|--- 2022-07-17 14:27:45+00:00| seen| https://t.me/cibsecurity/46388...