CVE-2023-2306 Qognify NiceVision Use of Hard-coded Credentials

Qognify NiceVision versions 3.1 and prior are vulnerable to exposing sensitive information using hard-coded credentials. With these credentials an attacker can retrieve information about the cameras, user information, and modify database records...

CVE-2023-41033

A vulnerability has been identified in Parasolid V35.0 All versions V35.0.260, Parasolid V35.1 All versions V35.1.246, Parasolid V36.0 All versions V36.0.156, Simcenter Femap V2301 All versions V2301.0003, Simcenter Femap V2306 All versions V2306.0001. The affected application contains an out of...

CVE-2023-32447

Dell Wyse ThinOS versions prior to 2306 9.4.2103 contain a sensitive information disclosure vulnerability. A malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files...

PT-2023-23794 · Dell · Dell Wyse Thinos

Name of the Vulnerable Software and Affected Versions: Dell Wyse ThinOS versions prior to 2306 9.4.2103 Description: The issue allows a malicious user with local access to the device to read sensitive information written to the log files. This is a sensitive information disclosure issue...

GLSA-202208-36 : Oracle VirtualBox: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-36 Oracle VirtualBox: Multiple Vulnerabilities - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.20. Difficult to exploit...

CVE-2022-2306

CVE-2022-2306 affects heroiclabs/nakama: old session tokens can be used to authenticate to the application, indicating insecure session expiration where logout does not invalidate tokens. The root cause described across connected sources is improper session handling allowing reuse of previously i...

CVE-2022-2306 Insufficient Session Expiration in heroiclabs/nakama

Old session tokens can be used to authenticate to the application and send authenticated requests...

Mageia: Security Advisory (MGASA-2021-0197)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : virtualbox (openSUSE-SU-2021:0977-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:0977-1 advisory. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Pri...

Advisory ROSA-SA-2021-1918

Software: mercurial 2.6.2 OS: Cobalt 7.9 CVE-ID: CVE-2014-9462 CVE-Crit: CRITICAL CVE-DESC: The validaterepo function in sshpeer in Mercurial before 3.2.4 allows remote attackers to execute arbitrary commands via the created repository name in the clone command. CVE-STATUS: default CVE-REV: defau...

RHEL 8 : microcode_ctl (RHSA-2021:2306)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2306 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...

SUSE: Security Advisory (SUSE-SU-2020:2306-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle VirtualBox Security Update (cpuapr2021) - Windows

Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

openSUSE: Security Advisory for virtualbox (openSUSE-SU-2021:0723-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-2306

CVE-2021-2306 affects Oracle VM VirtualBox Core before 6.1.20. Multiple connected advisories confirm this vulnerability in VirtualBox, with impacts including arbitrary code execution, information disclosure, and potential filesystem access, primarily for local/privileged attack scenarios. The pub...

KLA12160 Multiple vulnerabilities in Oracle VirtualBox

Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. A security bypass vulnerability in Core component can...

RHEL 7 : OpenShift Container Platform 3.11.394 (RHSA-2021:0637)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0637 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.5.27 packages and security update

Red Hat OpenShift Container Platform release 4.5.27 is now available with updates to packages and images that fix several bugs and add enhancements. This release also includes a security update for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having ...

CVE-2020-2306

CVE-2020-2306 : In Jenkins Mercurial Plugin versions before 2.12 (and affected earlier branches) there is a missing authorization check on an HTTP endpoint. This allows an attacker with Overall/Read permission to enumerate and obtain the names of configured Mercurial installations, constituting a...

CVE-2019-2306

CVE-2019-2306 is described as: an improper casting of a structure while handling a buffer causes an out-of-bounds read in the display code across Snapdragon platforms (Snapdragon Auto, Connectivity, Consumer IoT, Industrial IoT, IoT, Mobile, Voice & Music, Wearables) on multiple SoCs (e.g., SD se...