62 matches found
CVE-2023-5625
CVE-2023-5625 describes a patch regression in Red Hat builds of python-eventlet where the CVE-2021-21419 fix was not applied across all builds/products. Connected sources confirm the issue affects python-eventlet and note a related memory-exhaustion risk via large or highly compressed websocket f...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.12.41 packages and security update
Red Hat OpenShift Container Platform release 4.12.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...
OESA-2023-1768 python-eventlet security update
Eventlet is a concurrent networking library for Python that allows you to change how you run your code, not how you write it. Security Fixes: A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for...
CVE-2023-5625
A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products...
Ubuntu 22.10 : Mako vulnerability (USN-5625-2)
The remote Ubuntu 22.10 host has a package installed that is affected by a vulnerability as referenced in the USN-5625-2 advisory. USN-5625-1 fixed a vulnerability in Mako. This update provides the corresponding update for Ubuntu 22.10. Tenable has extracted the preceding description block direct...
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Mako vulnerability (USN-5625-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5625-1 advisory. It was discovered that Mako incorrectly handled certain regular expressions. An attacker could possibly use this issue to caus...
STVS ProVision 5.9.10 Cross Site Request Forgery
STVS ProVision 5.9.10 Cross-Site Request Forgery Add Admin Vendor: STVS SA Product web page: http://www.stvs.ch Platform: Ruby Affected version: 5.9.10 build 2885-3a8219a 5.9.9 build 2882-7c3b787 5.9.7 build 2871-a450938 5.9.1 build 2771-1bbed11 5.9.0 build 2701-6123026 5.8.6 build 2557-84726f7 5...
CVE-2020-5625
Cross-site scripting vulnerability in XooNIps 3.48 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors...
CVE-2020-5625
The CVE-2020-5625 issue affects XOOPS module XooNIps (versions 3.48 and earlier). Multiple connected sources confirm a Cross-site Scripting vulnerability that allows an arbitrary script to execute in the user’s browser via unspecified vectors. Public impact notes indicate that an attacker could r...
CVE-2019-5625
creationtimestamp| type| source ---|---|--- 2019-05-22 19:48:20+00:00| seen| https://t.me/cvemitreorg/150...
CVE-2019-5625 Eaton Halo Home Android App Insecure Storage
The Android mobile application Halo Home before 1.11.0 stores OAuth authentication and refresh access tokens in a clear text file. This file persists until the user logs out of the application and reboots the device. This vulnerability can allow an attacker to impersonate the legitimate user by...
CVE-2019-5625
CVE-2019-5625 affects the Android Halo Home app prior to 1.11.0, where OAuth authentication and refresh tokens are stored in a clear text file. The file persists until logout or device reboot, enabling an attacker with physical access or a compromised app to impersonate the user by reusing the to...
OnePlus 3/3T OxygenOS Unauthorized Flash Dumping via fastboot(CVE-2017-5625)
Products OnePlus 3T OnePlus 3 Vulnerable Version OxygenOS 4.0.2 and earlier Mitigation Install OxygenOS 4.0.3 or later Summary A physical attacker, PC malware / malicious charger having ADB or fastboot access to the device can cause a locked bootloader to partially dump the content of an arbitrar...
FreeBSD : mysql -- multiple vulnerabilities (e5186c65-d729-11e6-a9a5-b499baebfeaf)
Oracle reports : Local security vulnerability in 'Server: Packaging' sub component. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and contributors...
SOL26430555 - MySQL vulnerability CVE-2016-5625
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...
CVE-2016-5625
Unspecified vulnerability in Oracle MySQL 5.7.14 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Packaging...
CVE-2016-5625
CVE-2016-5625 affects Oracle MySQL 5.7.14 and earlier, with a local, packaging-subcomponent vulnerability that can impact confidentiality, integrity, and availability. Affected product is Oracle MySQL Server; root cause relates to the Server: Packaging area. Connected sources confirm the impact b...
CVE-2016-5625
Unspecified vulnerability in Oracle MySQL 5.7.14 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Packaging...
Oracle MySQL Server 5.7 <= 5.7.14 Security Update (cpuoct2016) - Windows
Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...