92 matches found
CVE-2023-2307
Cross-Site Request Forgery CSRF in GitHub repository builderio/qwik prior to 0.104.0...
CVE-2023-2307 Cross-Site Request Forgery (CSRF) in builderio/qwik
Cross-Site Request Forgery CSRF in GitHub repository builderio/qwik prior to 0.104.0...
CVE-2023-2307 Cross-Site Request Forgery (CSRF) in builderio/qwik
Cross-Site Request Forgery CSRF in GitHub repository builderio/qwik prior to 0.104.0...
CVE-2023-2307
CVE-2023-2307 describes a Cross-Site Request Forgery (CSRF) vulnerability in the GitHub repository for builderio/qwik. The vulnerability affects versions prior to 0.104.0, where an attacker could abuse CSRF to perform unintended actions in scoped user contexts. Public sources consistently referen...
CVE-2022-2307
A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1 allows a malicious Group Owner to retain a usable Group Access Token even after the Group is deleted,...
GitLab 13.0 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2307)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1 allows...
SUSE SLED15 / SLES15 Security Update : ldb, samba (SUSE-SU-2022:2307-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2307-1 advisory. - MaxQueryDuration not honoured in Samba AD DC LDAP CVE-2021-3670 Note that Nessus has not tested for this issue but ha...
openSUSE: Security Advisory for ldb, (SUSE-SU-2022:2307-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
American Auto-Matrix Front-End Solutions Vulnerabilities
OVERVIEW Independent researcher Maxim Rupp has identified a local file inclusion and a plain text storage of password vulnerabilities in American Auto-Matrix’s Building Automation Front-End Solutions application. The Aspect-Matrix hardware platform was made end of life in 2015 and will no longer...
Moderate: Red Hat Security Advisory: mysql:8.0 security, bug fix, and enhancement update
An update for the mysql:8.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2021-2307 affecting package mysql 8.0.23-1
CVE-2021-2307 affecting package mysql 8.0.23-1. An upgraded version of the package is available that resolves this issue...
SUSE: Security Advisory (SUSE-SU-2020:2307-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 8 : microcode_ctl (RHSA-2021:2307)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2307 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...
SUSE: Security Advisory (SUSE-SU-2019:2307-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Photon OS 3.0: Mysql PHSA-2021-3.0-0231
An update of the mysql package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0231. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...
CVE-2021-2307
CVE-2021-2307 affects Oracle MySQL Server (Server: Packaging) with affected versions 5.7.33 and prior and 8.0.23 and prior. The vulnerability allows unauthenticated access within the MySQL Server host after user interaction; CVSSv3.1 base score 6.1 (Confidentiality/Integrity). Affected components...
MySQL 5.7.x < 5.7.34 Multiple Vulnerabilities (Apr 2021 CPU)
The version of MySQL running on the remote host is 5.7.x prior to 5.7.34. It is, therefore, affected by multiple vulnerabilities, including the following, as noted in the April 2021 Critical Patch Update advisory: - Vulnerability in the MySQL Server product of Oracle MySQL component: Server:...
Oracle MySQL Server <= 5.7.33 / 8.0 <= 8.0.23 Security Update (cpuapr2021) - Windows
Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...
RHEL 7 : OpenShift Container Platform 3.11.394 (RHSA-2021:0637)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0637 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.5.27 packages and security update
Red Hat OpenShift Container Platform release 4.5.27 is now available with updates to packages and images that fix several bugs and add enhancements. This release also includes a security update for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having ...