50 matches found
BELL-CVE-2026-22795
Bulletin has no description...
ALSA-2026:1473 Important: openssl security update
OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS12 file CVE-2025-11187...
openssl security update
3.5.1-7.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.1-7 - Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469 CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420 CVE-2025-69421 CVE-2026-22795 CVE-2026-227...
RHEL 10 : openssl (RHSA-2026:1472)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1472 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...
USN-7980-2: OpenSSL vulnerabilities
USN-7980-1 fixed vulnerabilities in OpenSSL. This update provides the corresponding updates for CVE-2025-68160 for openssl and openssl1.0, CVE-2025-69418 for openssl on Ubuntu 18.04 LTS and Ubuntu 20.04 LTS, CVE-2025-69419 for openssl on Ubuntu 18.04 LTS and Ubuntu 20.04 LTS, CVE-2025-69420 for...
CVE-2026-22795
creationtimestamp| type| source ---|---|--- 2026-01-27 16:31:45+00:00| seen| https://seclists.org/oss-sec/2026/q1/123 2026-01-27 18:12:29+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdgecjkklr2l 2026-01-27 21:03:12+00:00| seen|...
OpenSSL 1.1.1 < 1.1.1ze Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 1.1.1ze. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.1.1ze advisory. - Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS12 file. Impact...
CVE-2021-22795
A CWE-78 Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause remote code execution when performed over the network. Affected Product: StruxureWare Data Center Expert V7.8.1 and prior...
Linux Distros Unpatched Vulnerability : CVE-2023-22795
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A regular expression based DoS vulnerability in Action Dispatch 6.1.7.1 and 7.0.4.1 related to the If- None-Match header. A specially crafted HTTP If-None-Match...
CVE-2025-22795 WordPress Multilang Contact Form Plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Thorsten Krug Multilang Contact Form allows Reflected XSS.This issue affects Multilang Contact Form: from n/a through 1.5...
CVE-2025-22795 WordPress Multilang Contact Form Plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in digitaldonkey Multilang Contact Form multilang-contact-form allows Reflected XSS.This issue affects Multilang Contact Form: from n/a through = 1.5...
CVE-2023-22795 affecting package ruby 2.6.10-1
CVE-2023-22795 affecting package ruby 2.6.10-1. This CVE either no longer is or was never applicable...
openSUSE: Security Advisory for rubygem (SUSE-SU-2023:0444-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-22795
The CVE-2024-22795 entry covers an Insecure Permissions vulnerability in ForeScout SecureConnector (v11.3.06.0063). A local attacker can escalate privileges via the Recheck Compliance Status component, as documented across multiple sources in the connected set (Red Hat advisory mirrors the same i...
CVE-2023-22795 affecting package ruby for versions less than 3.1.4-1
CVE-2023-22795 affecting package ruby for versions less than 3.1.4-1. An upgraded version of the package is available that resolves this issue...
[SECURITY] [DSA 5372-1] rails security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5372-1 [email protected] https://www.debian.org/security/ Aron Xu March 13, 2023 https://www.debian.org/security/faq - -------------------------------------------------------------------------...
CVE-2023-22795
creationtimestamp| type| source ---|---|--- 2023-02-09 22:26:26+00:00| seen| https://t.me/cibsecurity/57872 2024-02-02 15:27:12+00:00| seen| https://t.me/ctinow/178108...
CVE-2023-22795
CVE-2023-22795 is a DoS vulnerability in Action Dispatch caused by a regular-expression backtracking issue triggered by a crafted If-None-Match header. The issue affects Action Dispatch <6.1.7.1 and
CVE-2023-22795
A regular expression based DoS vulnerability in Action Dispatch 6.1.7.1 and 7.0.4.1 related to the If-None-Match header. A specially crafted HTTP If-None-Match header can cause the regular expression engine to enter a state of catastrophic backtracking, when on a version of Ruby below 3.2.0. This...
Fedora 38 : rubygem-actioncable / rubygem-actionmailbox / rubygem-actionmailer / etc (2023-f60cca0686)
The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-f60cca0686 advisory. Upgrade to Ruby on Rails 7.0.4.2. Fixes numerous CVEs: https://rubyonrails.org/2023/1/17/Rails- Versions-6-0-6-1-6-1-7-1-7-0-4-1-have-been-released...