934 matches found
Siemens Mendix SAML Module
1. EXECUTIVE SUMMARY CVSS v3 7.4 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: Mendix SAML Module Vulnerability: Authentication Bypass by Capture-replay 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA- ICSA-22-258-04 Siemens Mendix SAML...
AlmaLinux 8 : php:7.4 (ALSA-2022:6158)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:6158 advisory. php: uninitialized array in pgqueryparams leading to RCE CVE-2022-31625 Tenable has extracted the preceding description block directly from the AlmaLinux security...
CentOS 8 : php:7.4 (CESA-2022:6158)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:6158 advisory. - php: Uninitialized array in pgqueryparams leading to RCE CVE-2022-31625 Note that Nessus has not tested for this issue but has instead relied only on the...
Oracle Linux 8 : php:7.4 (ELSA-2022-6158)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6158 advisory. php 7.4.19-4 - fix uninitialized array in pgqueryparams leading to RCE CVE-2022-31625 Tenable has extracted the preceding description block directly from the...
Moderate: Red Hat Security Advisory: php:7.4 security update
An update for the php:7.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
ALSA-2022:6158 Moderate: php:7.4 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: uninitialized array in pgqueryparams leading to RCE CVE-2022-31625 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...
Security Bulletin: Samba for IBM i is vulnerable to attacker obtaining sensitive information due to a memory leak with SMB1 requests (CVE-2022-32742)
Summary Samba for IBM i is vulnerable to an attacker obtaining sensitive information due to a memory leak handling SMB1 requests as described in the vulnerability details section. IBM i has addressed the vulnerability in Samba with a fix as described in the remediation/fixes section. Vulnerabilit...
Security Bulletin: IBM i Clustering is affected by CVE-2019-4381
Summary IBM i Clustering is vulnerable to this security vulnerability. IBM i has addressed this vulnerability. This security bulletin has been updated, on June 21, 2019, as an additional IBM i PTF is available for IBM i 7.4. Vulnerability Details CVEID: CVE-2019-4381 DESCRIPTION: IBM i Clustering...
PT-2022-9875 · Brocade · Brocade Fabric Os
Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions 7.4.1b through 7.4.1.x Brocade Fabric OS versions 7.3.1d through 7.3.x Description: A vulnerability in Brocade Fabric OS could allow local users to conduct privileged directory transversal. The affected versions hav...
CVE-2021-39088
IBM QRadar SIEM 7.3, 7.4, and 7.5 is vulnerable to local privilege escalation if this could be combined with other unknown vulnerabilities then privilege escalation could be performed. IBM X-Force ID: 216111...
Privilege escalation
IBM QRadar SIEM 7.3, 7.4, and 7.5 is vulnerable to local privilege escalation if this could be combined with other unknown vulnerabilities then privilege escalation could be performed. IBM X-Force ID: 216111...
CVE-2021-39088
IBM QRadar SIEM is affected by CVE-2021-39088, a local privilege escalation vulnerability. Affected versions are QRadar SIEM 7.3.0–7.3.3 Fix Pack 11, 7.4.0–7.4.3 Fix Pack 5, and 7.5.0–7.5.0 Update Pack 1. The issue allows privilege escalation if combined with other unknown vulnerabilities; no exp...
OS Command Injection user to admin
Summary Arbitrary commands can be injected when installing DokuWiki. Description Authenticated as "User" role users can inject commands. Injected commands are running as "admin" user. Prerequisite 1. Any user access 2. php 7.4 must be installed in order to install dokuwiki only admin can install...
CVE-2022-22424
IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information from the TLS key file due to incorrect file permissions. IBM X-Force ID: 223597...
CVE-2021-38936
IBM QRadar SIEM (versions 7.3.0–7.3.3, 7.4.0–7.4.3, and 7.5.0–7.5.0 Update Pack 1) is affected by CVE-2021-38936, an information-disclosure vulnerability where a privileged user could access highly sensitive data due to inadequate protection of sensitive information. The IBM advisory lists the fi...
CVE-2021-29755
IBM QRadar SIEM is affected by CVE-2021-29755 due to improper certificate validation in some inter-host communications. Affected products and versions include QRadar SIEM 7.3.x (7.3.0–7.3.3), 7.4.x (7.4.0–7.4.3), and 7.5.x (7.5.0–7.5.0 Update Pack 1). The underlying issue is certificate validatio...
CVE-2022-34358
CVE-2022-34358 affects IBM i 7.2–7.5, with a cross-site scripting flaw in the Web UI (Digital Certificate Manager) due to insufficient input validation, enabling arbitrary JavaScript in a trusted session. CVSSv3.1 base score 5.4. Remediation per IBM bulletin: apply PTF fixes to IBM i releases 7.2...
Code injection
IBM QRadar SIEM 7.3, 7.4, and 7.5 may be vulnerable to partial denial of service attack, resulting in some protocols not listening to specified ports. IBM X-Force ID: 214028...
CVE-2021-39041
IBM QRadar SIEM CVE-2021-39041 affects QRadar SIEM v7.3, v7.4, and v7.5. The vulnerability is a partial denial-of-service in the Common and TCPMultilineSyslog protocol components, stemming from how error messages are processed and causing some protocols not to listen on their configured ports. IB...