45 matches found
CVE-2023-23915 affecting package cmake for versions less than 3.28.2-1
CVE-2023-23915 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-23915 affecting package rust for versions less than 1.72.0-2
CVE-2023-23915 affecting package rust for versions less than 1.72.0-2. An upgraded version of the package is available that resolves this issue...
BELL-CVE-2023-23915 CVE-2023-23915 does not affect BellSoft software
Bulletin has no description...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2286)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2066)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-23915 affecting package mysql for versions less than 8.0.33-1
CVE-2023-23915 affecting package mysql for versions less than 8.0.33-1. An upgraded version of the package is available that resolves this issue...
USN-5891-1: curl vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description Harry Sintonen discovered that curl incorrectly handled HSTS support when multiple URLs are requested serially. A remote attacker could possibly use this issue to cause curl to use...
CVE-2023-23915 affecting package curl 7.86.0-3
CVE-2023-23915 affecting package curl 7.86.0-3. An upgraded version of the package is available that resolves this issue...
CVE-2023-23915 affecting package curl for versions less than 7.88.1-1
CVE-2023-23915 affecting package curl for versions less than 7.88.1-1. An upgraded version of the package is available that resolves this issue...
Ubuntu: Security Advisory (USN-5891-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : curl vulnerabilities (USN-5891-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5891-1 advisory. Harry Sintonen discovered that curl incorrectly handled HSTS support when multiple URLs are requested serially. A remote attacker...
CVE-2023-23915
CVE-2023-23915 affects multiple packages (e.g., rust 1.59.0-1, mysql 8.0.32-1, cmake 3.21.4-3, tensorflow <2.16.1-1, rust <1.72.0-2, cmake <3.28.2-1, mysql =2.16.1-1, cmake >=3.28.2-1, mysql >=8.0.33-1) to resolve the issue. The initial curl CVE description documents a separate HST...
Fedora 37 : curl (2023-ddf6575695)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ddf6575695 advisory. - fix HTTP multi-header compression denial of service CVE-2023-23916 - share HSTS between handles CVE-2023-23915 CVE-2023-23914 Tenable has extracte...
Slackware: Security Advisory (SSA:2023-046-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current curl Multiple Vulnerabilities (SSA:2023-046-01)
The version of curl installed on the remote host is prior to 7.88.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-046-01 advisory. - A cleartext transmission of sensitive information vulnerability exists in curl v7.88.0 that could cause HSTS functionality...
CVE-2022-23915
creationtimestamp| type| source ---|---|--- 2022-03-04 22:27:12+00:00| seen| https://t.me/cibsecurity/38469...
CVE-2022-23915 Remote Code Execution (RCE)
The package weblate from 0 and before 4.11.1 are vulnerable to Remote Code Execution RCE via argument injection when using git or mercurial repositories. Authenticated users, can change the behavior of the application in an unintended way, leading to command execution...
CVE-2022-23915
CVE-2022-23915 affects Weblate versions 0 through 4.11.0, allowing an authenticated user to trigger Remote Code Execution via argument injection when using Git or Mercurial repositories. The root cause is improper handling of arguments passed to VCS commands, enabling unintended behavior and comm...
CVE-2022-24727
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-23915. Reason: This candidate is a reservation duplicate of CVE-2022-23915. Notes: All CVE users should reference CVE-2022-23915 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...