Moodle 3.10.x < 3.10.5 Multiple Vulnerabilities

The version of Moodle installed on the remote host is 3.9.x prior to 3.9.8, 3.10.x prior to 3.10.5 or 3.11.x prior to 3.11.1. It is, therefore, affected by multiple vulnerabilities: - An SQL injection in the library fetching a user's enrolled courses. CVE-2021-36392 - An SQL injection in the...

OESA-2022-1962 htslib security update

HTSlib is an implementation of a unified C library for accessing common file formats, such as SAM, CRAM and VCF, used for high-throughput sequencing data, and is the core library used by samtools and bcftools. HTSlib only depends on zlib. It is known to be compatible with gcc, g++ and clang. HTSl...

CVE-2022-36403

creationtimestamp| type| source ---|---|--- 2022-09-08 12:15:05+00:00| seen| https://t.me/cibsecurity/49446...

CVE-2022-36403

Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2022-36403

The CVE-2022-36403 issue affects Ricoh Device Software Manager installer up to version 2.20.3.0. The root cause is an untrusted search path that may cause insecure loading of DLLs (CWE-427), potentially allowing arbitrary code execution with the installer user’s privileges. Public documents consi...

openSUSE 15 Security Update : libhts (openSUSE-SU-2021:1177-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1177-1 advisory. - HTSlib 1.10 through 1.10.2 allows out-of-bounds write access in vcfparseformat called from vcfparse and vcfread. CVE-2020-36403 Note that Nessus h...

openSUSE: Security Advisory for libhts (openSUSE-SU-2021:1177-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:1177-1 Security update for libhts

This update of libhts fixes the following security issue: - CVE-2020-36403: Fixed an out-of-bounds write access in vcfparseformat bsc1187917...

CVE-2020-36403

HTSlib up to version 1.10.2 is affected by CVE-2020-36403, which enables an out-of-bounds write in vcf_parse_format (invoked by vcf_parse and vcf_read). The issue is present in HTSlib’s handling of VCF parsing, with impact described as out-of-bounds write. Several connected sources confirm the vu...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2019-36403)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in Oracle MySQL Server. An attacker can exploit this vulnerability to cause a denial of service hang or frequent...