51378 matches found
CVE-2016-4572
CVE-2016-4572 affects Cloudera CDH versions prior to 5.7.1, where Impala REVOKE ALL ON SERVER commands fail to revoke all privileges. The risk is that some privileges may remain active for affected roles/services. The connected Red Hat and CNVD entries corroborate the same description. No explici...
CVE-2016-5724
CVE-2016-5724 affects Cloudera CDH prior to 5.9. The vulnerability is an information disclosure risk in the Diagnostic Support Bundles, allowing a remote attacker to obtain potentially sensitive information from those bundles. The issue is described consistently across connected sources as a flaw...
CVE-2016-5724
Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles...
CVE-2016-6353
CVE-2016-6353 affects Cloudera CDH’s Cloudera Search component. The vulnerability arises in Solr Queries by document ID that can bypass Sentry document-level security via the RealTimeGetHandler, permitting unauthorized access to documents. Affected software is Cloudera CDH with Cloudera Search (p...
Important: Red Hat Security Advisory: python-jinja2 security update
An update for python-jinja2 is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...
SUSE SLED15 / SLES15 Security Update : bluez (SUSE-SU-2019:3046-1)
This update for bluez fixes the following issues : CVE-2016-9798: Fixed a use-after-free in confopt bsc1013712. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as...
SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2019:3058-1)
This update for tiff fixes the following issues : Security issues fixed : CVE-2019-14973: Fixed an improper check which was depended on the compiler which could have led to integer overflow bsc1146608. CVE-2016-5102: Fixed a buffer overflow in readgifimage bsc983268 CVE-2018-17000: Fixed a NULL...
SUSE-SU-2019:3046-1 Security update for bluez
This update for bluez fixes the following issues: - CVE-2016-9798: Fixed a use-after-free in confopt bsc1013712...
Amazon Linux AMI : glibc (ALAS-2019-1320)
In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the...
Security Bulletin: A security vulnerability has been identified in Websphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On (CVE-2016-0359)
Summary Websphere Application Server is shipped as a component of IBM Security Access Manager for Enterprise Single Sign-On. Information about a security vulnerability affecting Websphere Application Server has been published in a security bulletin. Vulnerability Details Consult the security...
CVE-2016-9652
Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75...
CVE-2016-5194
Unspecified vulnerabilities in Google Chrome before 54.0.2840.59...
CVE-2016-9652
CVE-2016-9652 concerns Google Chrome/Chromium with multiple vulnerabilities reported in the Chromium project prior to version 55.0.2883.75. The connected advisories confirm this CVE is addressed by upgrading to 55.0.2883.75 (e.g., Debian: 55.0.2883.75-1~deb8u1; Gentoo GLSA 201612-11; Debian DSA-3...
CVE-2016-9652
Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75...
CVE-2016-5194
CVE-2016-5194 is listed among multiple Chromium/Chromium-derivative vulnerabilities (Google Chrome) with no public technical details provided in the initial description. Debian and Debian-based advisories (DSA-3731-1) associate CVE-2016-5194 with chromium-browser and indicate remediation in Jessi...
CVE-2016-1000236
Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used...
CVE-2016-1000236
CVE-2016-1000236 affects the node-cookie-signature package prior to v1.0.6. Root cause: a timing-attack due to a non-constant-time comparison in signature verification. Impact: under favorable network conditions, an attacker could deduce the secret by exploiting slight timing differences (per-cha...
Security Bulletin: IBM Security Guardium Database Activity Monitor is affected by OS Command Injection vulnerability (CVE-2016-0236)
Summary IBM Security Guardium Database Activity Monitor could allow an authenticated attacker to injection commands into the search field that will be executed as root. Vulnerability Details CVEID: CVE-2016-0236 DESCRIPTION: IBM Security Guardium Database Activity Monitor could allow an...