21 matches found
CVE-2023-29258
IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.1, and 11.5 is vulnerable to a denial of service through a specially crafted federated query on specific federation objects. IBM X-Force ID: 252048...
CVE-2023-29258
creationtimestamp| type| source ---|---|--- 2023-12-22 09:51:39+00:00| seen| https://t.me/ctinow/158277 2024-01-12 15:26:29+00:00| seen| https://t.me/ctinow/167311...
Security Bulletin: Multiple security vulnerabilities have been identified in IBM DB2 which is shipped with IBM Intelligent Operations Center.
Summary IBM DB2 shipped with IBM Intelligent Operations Center. Information about security vulnerabilities affecting IBM DB2 has been published in a security bulletin CVE-2015-8383, CVE-2015-8381, CVE-2015-8386, CVE-2015-8388, CVE-2015-8385, CVE-2015-8387, CVE-2015-8391, CVE-2015-8390,...
CVE-2023-29258
CVE-2023-29258: IBM Db2 for Linux, UNIX and Windows (including Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service via a specially crafted federated query on specific federation objects. Root cause cited across connected docs is improper input handling leading to DoS; impact is...
CVE-2023-44210
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 29258, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...
CVE-2022-29258
creationtimestamp| type| source ---|---|--- 2022-05-31 20:23:47+00:00| seen| https://t.me/cibsecurity/43569...
CVE-2022-29258 Cross-site Scripting in Filter Stream Converter Application in XWiki Platform
XWiki Platform Filter UI provides a generic user interface to convert from a XWiki Filter input stream to an output stream with settings for each stream. Starting with versions 6.0-milestone-2 and 5.4.4 and prior to versions 12.10.11, 14.0-rc-1, 13.4.7, and 13.10.3, XWiki Platform Filter UI...
CVE-2022-29258
CVE-2022-29258 affects XWiki Platform Filter UI, with a cross-site scripting vulnerability in the Filter.FilterStreamDescriptorForm page that can affect most form fields on the home page. Affected versions include 6.0-milestone-2 and 5.4.4 prior to 12.10.11, 14.0-rc-1, 13.4.7, and 13.10.3. The is...
CVE-2022-29258 Cross-site Scripting in Filter Stream Converter Application in XWiki Platform
XWiki Platform Filter UI provides a generic user interface to convert from a XWiki Filter input stream to an output stream with settings for each stream. Starting with versions 6.0-milestone-2 and 5.4.4 and prior to versions 12.10.11, 14.0-rc-1, 13.4.7, and 13.10.3, XWiki Platform Filter UI...
olcne security update
olcne 1.2.4-5 - Updated registry-image-helper.sh to work with olcne-utils 1.2.4-4 - Fix istio template for 1.9.6 for k8s update failure 1.2.4-3 - Fixed yaml file to stop olcne-nginx and keepalived services at uninstall Orabug: 32296282 1.2.4-2 - Fix iptables issue when running on OL7 host using O...
olcne security update
olcne 1.3.1-5 - Updated registry-image-helper.sh to work with olcne-utils 1.3.1-4 - Fix istio template for 1.9.6 and 1.10.2 for k8s update failure 1.3.1-3 - Added ENDVERSIONBLOCK for OLM image 1.3.1-2 - Fix iptables issue when running on OL7 host using OL8 image for 1.19.8 - Fix iptables issue wh...
olcne security update
coredns 1.7.0-1 - Added Oracle specific build files cri-o 1.18.4-2 - Fix for CVE-2021-27918 1.18.4-1 - Added Oracle Specifile Files for cri-o cri-tools 1.18.0-2 - Address CVE-2021-27918 etcd 3.4.3-1.0.5 - Address CVE-2021-27918 flannel 0.12.0-2 - Address CVE-2021-27918 yq 3.4.0-2 - Address...
CVE-2021-29258
An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion...
CVE-2021-29258
CVE-2021-29258 affects Envoy 1.14.0, causing a remote crash in HTTP2 Metadata triggered by an empty METADATA map → Reachable Assertion. CVSSv3.1 base score 7.5 (HIGH, NETWORK, no user interaction). The connected BIT-ENVOY entry confirms the issue; no exploitation details or fixed-version info are...
Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.13 security update
An update for servicemesh and servicemesh-proxy is now available for OpenShift Service Mesh 1.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.3 security update
An update for servicemesh-proxy is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
RHEL 8 : Red Hat OpenShift Service Mesh 1.1.13 (RHSA-2021:1322)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1322 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise...
RHEL 8 : Red Hat OpenShift Service Mesh 2.0.3 (RHSA-2021:1324)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:1324 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise...
CVE-2020-29258
creationtimestamp| type| source ---|---|--- 2020-12-10 02:32:48+00:00| seen| https://t.me/cibsecurity/18388 2020-12-10 02:35:49+00:00| seen| https://t.me/cibsecurity/18408...
CVE-2020-29258
CVE-2020-29258 is an XSS vulnerability in Online Examination System 1.0, exploitable via the w parameter in index.php. The affected component is the web application’s index.php handling the w query parameter, enabling attacker-supplied script to be reflected to the user. Documented impact is clie...