59 matches found
SUSE-SU-2023:1910-1 Security update for glib2
This update for glib2 fixes the following issues: - CVE-2023-24593: Fixed a denial of service caused by handling a malicious text-form variant bsc1209714. - CVE-2023-25180: Fixed a denial of service caused by malicious serialised variant bsc1209713...
SUSE CVE-2023-25180
Rejected by upstream...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.6.57 packages and security update
Red Hat OpenShift Container Platform release 4.6.57 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.6. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 3.11.685 security and bug fix update
Red Hat OpenShift Container Platform release 3.11.685 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score,...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.7.48 packages and security update
Red Hat OpenShift Container Platform release 4.7.48 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.7. Red Hat Product Security has rated this update as having a...
RHEL 8 : OpenShift Container Platform 4.7.48 (RHSA-2022:1248)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:1248 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.10.6 security update
Red Hat OpenShift Container Platform release 4.10.6 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.10. Red Hat Product Security has rated this update as having a...
RHEL 7 / 8 : OpenShift Container Platform 4.8.35 (RHSA-2022:0871)
The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0871 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...
CVE-2020-25180 Rockwell Automation ISaGRAF5 Runtime Use of Hard-coded Cryptographic Key
Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x includes the functionality of setting a password that is required to execute privileged commands. The password value passed to ISaGRAF Runtime is the result of encryption performed with a fixed key value using the tiny encryption algorithm...
CVE-2020-25180 Rockwell Automation ISaGRAF5 Runtime Use of Hard-coded Cryptographic Key
Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x includes the functionality of setting a password that is required to execute privileged commands. The password value passed to ISaGRAF Runtime is the result of encryption performed with a fixed key value using the tiny encryption algorithm...
CVE-2020-25180
Summary (CVE-2020-25180) Rockwell Automation ISaGRAF Runtime 4.x–5.x uses a fixed-key TEA-based encryption for passwords needed to run privileged commands. A remote, unauthenticated attacker can submit a self-encrypted password to ISaGRAF 5 Runtime, potentially causing information disclosure on t...
CVE-2022-25180
Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier includes password parameters from the original build in replayed builds, allowing attackers with Run/Replay permission to obtain the values of password parameters passed to previous builds of a Pipeline...
CVE-2022-25180
Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier includes password parameters from the original build in replayed builds, allowing attackers with Run/Replay permission to obtain the values of password parameters passed to previous builds of a Pipeline...
CVE-2022-25180
CVE-2022-25180 affects Jenkins Pipeline: Groovy Plugin. Vulnerable until versions 2648.va9433432b33c and earlier, where password parameters from the original build are included in replayed builds. This allows attackers with Run/Replay permission to obtain values of password parameters from previo...
CVE-2022-25180
Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier includes password parameters from the original build in replayed builds, allowing attackers with Run/Replay permission to obtain the values of password parameters passed to previous builds of a Pipeline...
CVE-2019-25180
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2023-25180
CVE-2023-25180 is a GLib2 vulnerability described in connected advisories as a denial-of-service issue caused by processing a malicious text-form variant, enabling looping or resource exhaustion. Affected products reference GLib2 packages (glib2) across multiple Linux distributions; upstream note...
