141 matches found
SUSE SLES12: apache2-mod_php74 / php74 / php74-bcmath / php74-bz2 / etc (SUSE-SU-2023:1847-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1847-1 advisory. - CVE-2022-4900: Fixed potential buffer overflow via PHPCLISERVERWORKERS environment variable. bsc1209537 Tenable has extracted the precedin...
SUSE-SU-2023:1847-1 Security update for php7
This update for php7 fixes the following issues: - CVE-2022-4900: Fixed potential buffer overflow via PHPCLISERVERWORKERS environment variable. bsc1209537...
SUSE-SU-2023:1846-1 Security update for php7
This update for php7 fixes the following issues: - CVE-2022-4900: Fixed potential buffer overflow via PHPCLISERVERWORKERS environment variable. bsc1209537...
openSUSE 15 Security Update : php7 (SUSE-SU-2023:1583-1)
The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2023:1583-1 advisory. - CVE-2022-4900: Fixed potential buffer overflow via PHPCLISERVERWORKERS environment variable. bsc1209537 Tenable has extracted the preceding description blo...
SUSE-SU-2023:1583-1 Security update for php7
This update for php7 fixes the following issues: - CVE-2022-4900: Fixed potential buffer overflow via PHPCLISERVERWORKERS environment variable. bsc1209537...
The vulnerability of the command interpreter in Moxa EDR-810, EDR-G902, EDR-G903, TN-4900, and TN-5916 router microprogramming devices allows attackers to execute arbitrary code.
The vulnerability of the command interpreter in Moxa EDR-810, EDR-G902, EDR-G903, TN-4900, and TN-5916 microprogrammed service routers stems from errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HTTP/HTT...
PT-2022-5654 · Moxa · Moxa Edr-G903 +4
Name of the Vulnerable Software and Affected Versions: Moxa TN-5916 versions affected versions not specified Moxa TN-4900 versions affected versions not specified Moxa EDR-G903 versions affected versions not specified Moxa EDR-G902 versions affected versions not specified Moxa EDR-810 versions...
PT-2022-5605 · Moxa · Moxa Edr-G903 +3
Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 versions affected versions not specified Moxa EDR-G902 versions affected versions not specified Moxa EDR-G903 versions affected versions not specified Moxa TN-4900 versions affected versions not specified Description: The issue i...
SIF's Digital Signature Hash Algorithms Not Validated
Impact The github.com/sylabs/sif/v2/pkg/integrity package does not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. Patches A patch is available in version = v2.8.1 of the module. Users are encouraged to upgrade. The patch is commit...
GHSA-M5M3-46GJ-WCH8 SIF's Digital Signature Hash Algorithms Not Validated
Impact The github.com/sylabs/sif/v2/pkg/integrity package does not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. Patches A patch is available in version = v2.8.1 of the module. Users are encouraged to upgrade. The patch is commit...
GHSA-HHR2-F668-FF2W Use of a weak cryptographic algorithm in Gradle
The PGP signing plugin in Gradle before 6.0 relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a different one that has the same SHA-1 message digest, a related issue to CVE-2005-4900...
Use of a weak cryptographic algorithm in Gradle
The PGP signing plugin in Gradle before 6.0 relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a different one that has the same SHA-1 message digest, a related issue to CVE-2005-4900...
Debian: Security Advisory (DSA-4900-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : OpenEXR vulnerabilities (USN-4900-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4900-1 advisory. It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a craft...
Security Bulletin: Information disclosure vulnerability may affect IBM Business Automation Workflow - CVE-2020-4900
Summary IBM Business Process Manager and IBM Business Automation Workflow are vulnerable to an information disclosure attack. Vulnerability Details CVEID: CVE-2020-4900 DESCRIPTION: IBM Business Automation Workflow stores potentially sensitive information in log files that could be read by a loca...
CVE-2020-4900
CVE-2020-4900 affects IBM Business Automation Workflow 19.0.0.3, which stores potentially sensitive information in log files that could be read by a local user. This is a local information-disclosure vulnerability in the application’s logging, with a base CVSS v3.1 of 5.5 (MEDIUM) and CVSS v2 of ...
CVE-2020-4900
IBM Business Automation Workflow 19.0.0.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 190991...
