PT-2024-26226 · Eramba · Eramba

Name of the Vulnerable Software and Affected Versions: Eramba Community versions prior to 3.22.0 Description: A bug was found in the /attachments/attachments/download/ API endpoint, allowing arbitrary file download due to a lack of user permission checks. This issue is related to an Insecure Dire...

CVE-2023-42809

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

CVE-2023-42809 Redisson unsafe deserialization vulnerability

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

PT-2023-28595 · Oracle · Java

Name of the Vulnerable Software and Affected Versions: Redisson versions prior to 3.22.0 Description: The issue concerns a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some messages received from the Redis server contain Java objects that the client deserializes witho...

openSUSE: Security Advisory for sqliteodbc (openSUSE-SU-2020:0628-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for sqliteodbc (important)

openSUSE Security Update: Security update for sqliteodbc Announcement ID: openSUSE-SU-2020:0628-1 Rating: important References: 1171041 Cross-References: CVE-2020-12050 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

openSUSE Security Update : sqliteodbc (openSUSE-2020-628)

This update for sqliteodbc fixes the following issues : Security issue fixed : - CVE-2020-12050: Fixed a privilege escalation vulnerability boo1171041. Non-security issues fixed : - Update to version 0.9996 - update to SQLite 3.22.0 - fixes in handling DDL in SQLExecDirect et.al., thanks Andre...

Security update for sqliteodbc (important)

openSUSE Security Update: Security update for sqliteodbc Announcement ID: openSUSE-SU-2020:0612-1 Rating: important References: 1171041 Cross-References: CVE-2020-12050 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This upda...

CVE-2020-11753

An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0. It is possible for a user with appropriate privileges to create, modify, and execute scripting tasks without use of the UI or API. NOTE: in 3.22.0, scripting is disabled by default making this not...

AZL-40776 CVE-2014-4607 affecting package valgrind 3.22.0-1

Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run...

AZL-37054 CVE-2019-17414 affecting package vino 3.22.0-20

tinylcy Vino through 2017-12-15 allows remote attackers to cause a denial of service "vngetstring error: Resource temporarily unavailable" error and daemon crash via a long URL...

DEBIAN-CVE-2018-8740

In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c...

CVE-2018-8740

SQLite through 3.22.0 is vulnerable to a NULL pointer dereference when a database schema is corrupted via CREATE TABLE AS. The underlying issue is in build.c/prepare.c. The impact is a potential crash (denial of service). Affected disclosures across Debian, Cloud Foundry, and distro advisories co...