CVE-2023-43040 affecting package ceph for versions less than 16.2.10-4

CVE-2023-43040 affecting package ceph for versions less than 16.2.10-4. A patched version of the package is available...

CVE-2023-43040

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.10 : Ceph vulnerability (USN-6613-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6613-1 advisory. Lucas Henry discovered that Ceph incorrectly handled specially crafted POST requests. An uprivileged user could use th...

Medium: ceph-common

Issue Overview: A flaw was found in rgw. This flaw allows an unprivileged user to write to any buckets accessible by a given key if a POST's form-data contains a key called 'bucket' with a value matching the bucket's name used to sign the request. This issue results in a user being able to upload...

RHEL 9 : Red Hat Ceph Storage 6.1 (RHSA-2023:5693)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5693 advisory. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system...

CVE-2023-43040

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807...

CVE-2022-43040

creationtimestamp| type| source ---|---|--- 2022-10-19 18:15:12+00:00| seen| https://t.me/cibsecurity/51776 2025-05-09 14:26:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15729...

CVE-2022-43040

GPAC CVE-2022-43040 affects GPAC 2.1-DEV-rev368-gfd054169b-master. The vulnerability is a heap-based buffer overflow in the function gf_isom_box_dump_start_ex located in /isomedia/box_funcs.c. Connected documents confirm the package and issue context (GPAC issue 2280), but do not provide a specif...

CVE-2022-43040

GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function gfisomboxdumpstartex at /isomedia/boxfuncs.c...

CVE-2022-43040

GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function gfisomboxdumpstartex at /isomedia/boxfuncs.c...

CVE-2022-43040

GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function gfisomboxdumpstartex at /isomedia/boxfuncs.c...

CVE-2021-43040

creationtimestamp| type| source ---|---|--- 2021-12-06 07:20:28+00:00| seen| https://t.me/cibsecurity/33359...

CVE-2021-43040

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The privileged vaultServer could be leveraged to create arbitrary writable files, leading to privilege escalation...

CVE-2021-43040

Affected software: Kaseya Unitrends Backup Appliance prior to 10.5.5. Root cause / vulnerability: Privileged vaultServer can be leveraged to create arbitrary writable files, enabling privilege escalation. This is consistently described across multiple sources as the underlying issue in vulnerable...

CVE-2021-43040

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The privileged vaultServer could be leveraged to create arbitrary writable files, leading to privilege escalation...

GitLab Access Control Error Vulnerability (CNVD-2019-43040)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An access control error vulnerability exists in GitLab. T...