13077 matches found
RHSA-2021:3918 Red Hat Security Advisory: redis:5 security update
Bulletin has no description...
CVE-2023-3978 affecting package multus for versions less than 4.0.2-5
CVE-2023-3978 affecting package multus for versions less than 4.0.2-5. A patched version of the package is available...
RHSA-2017:0826 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.14 update on RHEL 5
Bulletin has no description...
RHSA-2008:0199 Red Hat Security Advisory: Red Hat Directory Server 7.1 Service Pack 5 security update
Bulletin has no description...
The vulnerability of the Kerberos 5 authentication network protocol, related to the execution of operations outside of the buffer in memory, allows attackers to compromise the confidentiality and accessibility of protected information.
The vulnerability of the Kerberos authentication protocol lies in the fact that memory reading occurs during the processing of message tokens. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and accessibility of protected information...
Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2024-2370)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP9 : krb5 (EulerOS-SA-2024-2370)
According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the...
Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2024-2419)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP10 : krb5 (EulerOS-SA-2024-2419)
According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens wit...
Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2024-2442)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2024-2395)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP9 : krb5 (EulerOS-SA-2024-2395)
According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the...
CVE-2024-26458
...
AZL-49071 CVE-2024-45590 affecting package python-tensorboard for versions less than 2.16.2-5
body-parser is Node.js body parsing middleware. body-parser 1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue is patched in...
AZL-49053 CVE-2024-43796 affecting package python-tensorboard for versions less than 2.16.2-5
Express.js minimalist web framework for node. In express 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect may execute untrusted code. This issue is patched in express 4.20.0...
QNAP QTS Video Station Multiple Vulnerabilities (QSA-24-24)
QNAP Video Station is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:qnap:videostation"; if...
CVE-2024-40766: Critical Improper Access Control Vulnerability Affecting SonicWall Devices
On August 22, 2024, security firm SonicWall published an advisory on CVE-2024-40766, a critical improper access control vulnerability affecting SonicOS, the operating system that runs on the company’s physical and virtual firewalls. While CVE-2024-40766 was not known to be exploited in the wild a...
Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to denial of service, privilege escalation and kerberos 5
Summary Kerberos 5 and IBM MQ used by IBM MQ Operator and Queue Manager container images are vulnerable to denial of service due to improper memory allocation, and privilege escalation which may lead to bypassing security restrictions. This bulletin identifies the steps required to address these...
Joomla! 3.x < 3.10.17 Multiple Vulnerabilities
According to its self-reported version, the instance of Joomla! running on the remote web server is 3.x prior to 3.10.17, 4.x prior to 4.4.7 or 5.x prior to 5.1.3. It is, therefore, affected by multiple vulnerabilities. - The stripImages and stripIframes methods didn't properly process inputs,...
