CVE-2022-21716

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 22.2.0, Twisted SSH client and server implement is able to accept an infinite amount of data for the peer's SSH version identifier. This ends up with a buffer using all the available memory. The attach...

CVE-2022-0587

Improper Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0588

Missing Authorization in Packagist librenms/librenms prior to 22.2.0...

Cross-site Scripting in librenms

Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.2.0...

GHSA-HXMR-5GV9-6P8V Cross-site Scripting in librenms

Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0580

Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0580

Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0575

Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.2.0...

PT-2022-13276 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms/librenms versions prior to 22.2.0 Description: The issue is related to improper access control, which can lead to incorrect authorization. This can potentially allow unauthorized access to certain features or data. Recommendations: F...

Denial of Service (DoS)

Overview Twisted is an event-based network programming and multi-protocol integration framework. Affected versions of this package are vulnerable to Denial of Service DoS by accepting an infinite amount of data for the peer's SSH version identifier. it is possible to be exploited via SSH transpor...

PT-2021-7398

Name of the Vulnerable Software and Affected Versions Twisted versions prior to 22.2.0 Description The Twisted SSH client and server implementation is vulnerable to a denial of service attack due to its ability to accept an infinite amount of data for the peer's SSH version identifier, resulting ...

Nextcloud Server Multiple Vulnerabilities (Oct 2021)

Nextcloud Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nextcloud:nextcloudserver"...

PT-2021-23152 · Nextcloud +2 · Nextcloud Server +2

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 20.0.13 Nextcloud Server versions prior to 21.0.5 Nextcloud Server versions prior to 22.2.0 Description: Nextcloud is an open-source, self-hosted productivity platform. Prior to versions 20.0.13, 21.0.5, and...

AZL-6820 CVE-2020-10109 affecting package python-twisted for versions less than 22.2.0-1

In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with a content-length and a chunked encoding header, the content-length took precedence and the remainder of the request body was interpreted as a pipelined request...

Pixar Renderman Input Validation Vulnerability (CNVD-2019-42872)

Pixar Renderman is a rendering application used in animation and movie production. An input validation vulnerability exists in the Installation Assistant tool in version 22.2.0 of Pixar Renderman for Mac OS X-based platforms. A local attacker can exploit the vulnerability to elevate privileges to...

CVE-2018-4055

A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to read any root file from the file system. An attacker would need local access to the machine to successful...

Privilege escalation

A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to read any root file from the file system. An attacker would need local access to the machine to successful...

Pixar Renderman Install Helper Arbitrary File Read Privilege Escalation Vulnerability

Summary A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to read any root file from the file system. An attacker would need local access to the machine to...