Fixed in Apache Tomcat Native Connector 2.0.14 / 1.3.7

Moderate: OCSP checks sometimes soft-fail even when soft-fail is disabled CVE-2026-29145 CLIENTCERT authentication did not fail OCSP checks as expected for some scenarios when soft fail was disabled. This was fixed with commit bcea0ac2 2.0.x and 204f7f8a 1.3.x. This issue was reported to the Tomc...

CVE-2023-29145

The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution. The attacker can set LDLIBRARYPATH, set LDPRELOAD, or run an executable file in a debugger...

CVE-2020-29145

In Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is vulnerable to stored XSS via the name or description field to a solutionUnitServlet?SuName=UserReferenceDataSU Access Rights Group. In most test cases, session hijacking was also possible by utilizing th...

CVE-2023-29145

creationtimestamp| type| source ---|---|--- 2023-07-01 00:15:23+00:00| seen| https://t.me/cibsecurity/65828...

CVE-2023-29145

The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution. The attacker can set LDLIBRARYPATH, set LDPRELOAD, or run an executable file in a debugger...

CVE-2023-29145

The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution. The attacker can set LDLIBRARYPATH, set LDPRELOAD, or run an executable file in a debugger...

CVE-2023-29145

The CVE-2023-29145 entry concerns Malwarebytes EDR 1.0.11 for Linux. The issue is a failure to properly whitelist executable libraries loaded by executables, enabling arbitrary code execution. An attacker could exploit by setting LD_LIBRARY_PATH, LD_PRELOAD, or running an executable under a debug...

Security fix for the ALT Linux 10 package dotnet-runtime-5.0 version 5.0.17-alt1

5.0.17-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 13, 2023 Vitaly Lipatov - new version 5.0.17 with rpmgs script - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267: .NET Denial of Service Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 5.0.17-alt1

5.0.17-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 12, 2023 Vitaly Lipatov - new version 5.0.17 with rpmgs script - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267: .NET Denial of Service Vulnerability...

Security fix for the ALT Linux 10 package dotnet-coreclr-3.1 version 3.1.26-alt1

3.1.26-alt1 built Feb. 20, 2023 Vitaly Lipatov in task 315307 Oct. 13, 2022 Vitaly Lipatov - .NET Core 3.1.26 - CVE-2022-30184: .NET Information Disclosure Vulnerability - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267:...

Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.26-alt1

3.1.26-alt1 built Feb. 20, 2023 Vitaly Lipatov in task 315307 Aug. 5, 2022 Vitaly Lipatov - .NET Core 3.1.26 and .NET Core SDK 3.1.420 releases - CVE-2022-30184: .NET Information Disclosure Vulnerability - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Servi...

SUSE CVE-2022-29145

unknown...

RHEL 9 : .NET 6.0 (RHSA-2022:4588)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:4588 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

Security fix for the ALT Linux 10 package dotnet-bootstrap-6.0 version 6.0.7-alt1

Aug. 5, 2022 Vitaly Lipatov 6.0.7-alt1 - The .NET 6.0.7 and .NET SDK 6.0.107 releases - CVE-2022-30184: .NET Information Disclosure Vulnerability - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267: .NET Denial of Service...

Security fix for the ALT Linux 10 package dotnet-runtime-7.0 version 6.0.7-alt1

Aug. 5, 2022 Vitaly Lipatov 6.0.7-alt1 - .NET 6.0.7 - CVE-2022-30184: .NET Information Disclosure Vulnerability - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267: .NET Denial of Service Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 6.0.7-alt1

Aug. 5, 2022 Vitaly Lipatov 6.0.7-alt1 - The .NET 6.0.7 and .NET SDK 6.0.107 releases - CVE-2022-30184: .NET Information Disclosure Vulnerability - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267: .NET Denial of Service...

Oracle Linux 9 : .NET / 6.0 (ELSA-2022-4588)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-4588 advisory. 6.0.105-1.0.1 - Add missing Oracle RIDs - Build all packages on source-build even when in servicing 6.0.105-1 - Update to .NET SDK 6.0.105 and Runtime...

Fedora: Security Advisory for dotnet6.0 (FEDORA-2022-256d559f0c)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for dotnet6.0 (FEDORA-2022-9a1d5ea33c)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for dotnet6.0 (FEDORA-2022-d69fee9f38)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...