89 matches found
CVE-2022-2167
CVE-2022-2167 affects the Newspaper WordPress theme prior to v12. The issue is a reflected XSS in which a parameter is not sanitized before being echoed back into an HTML attribute via an AJAX action, enabling script execution in the victim’s browser. Public-enrichment sources consistently identi...
MSC-2021-2167
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...
Important: Red Hat Security Advisory: kpatch-patch security update
An update is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
RHEL 8 : kpatch-patch (RHSA-2021:2167)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2167 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...
CVE-2021-2167
Vulnerability in the Oracle Solaris product of Oracle Systems component: Common Desktop Environment. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle...
Solaris 10 (x86) : 125280-10
CDE 1.6x86: dtsession patch. Date this patch was last updated by Sun : Apr/18/21 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'compat.inc'; if description scriptid148764; scriptversion"1.12";...
Solaris 10 (sparc) : 125279-10
CDE 1.6: dtsession patch. Date this patch was last updated by Sun : Apr/18/21 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'compat.inc'; if description scriptid148760; scriptversion"1.12";...
SUSE SLES12 Security Update : LibVNCServer (SUSE-SU-2020:2167-1)
This update for LibVNCServer fixes the following issues : security update fix CVE-2018-21247 bsc1173874, uninitialized memory contents are vulnerable to Information leak fix CVE-2019-20839 bsc1173875, buffer overflow in ConnectClientToUnixSock fix CVE-2019-20840 bsc1173876, unaligned accesses in...
RHEL 7 : OpenShift Container Platform 3.11 jenkins-2-plugins (RHSA-2020:0964)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0964 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cron. Securi...
CVE-2020-2167
Jenkins OpenShift Pipeline Plugin 1.0.56 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...
CVE-2020-2167
CVE-2020-2167 affects the Jenkins OpenShift Pipeline Plugin, with versions 1.0.56 and earlier vulnerable. The root cause is the YAML parser not restricting deserialization of arbitrary types, enabling remote code execution when a user provides YAML input to the plugin’s build step. Public records...
CVE-2020-2167
Jenkins OpenShift Pipeline Plugin 1.0.56 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...
Huawei EulerOS: Security Advisory for subversion (EulerOS-SA-2019-2550)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-2167
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...
CVE-2013-2167
CVE-2013-2167 affects python-keystoneclient versions 0.2.3 through 0.2.5, where the middleware memcache signing bypass creates a security feature bypass vulnerability. Connected sources confirm the issue is described as a middleware signing bypass in that range of versions, with related advisorie...
EulerOS 2.0 SP2 : subversion (EulerOS-SA-2019-2504)
According to the versions of the subversion packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Apache Subversion's moddontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-servic...
CVE-2019-2167
The CVE-2019-2167 entry concerns Google Android 10’s libxaac, where information disclosure can occur due to uninitialized data. Affected component/file: libxaac within Android 10. Root cause: uninitialized data leads to partial confidentiality impact (information disclosure) without executing cod...
Photon OS 1.0: Subversion PHSA-2016-0013
An update of the subversion package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2016-0013. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid12165...