57 matches found
Moderate: Red Hat Security Advisory: Satellite 6.13.7.3 Async Update
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat Satellite is a system...
CVE-2024-8553
creationtimestamp| type| source ---|---|--- 2024-10-31 16:56:34+00:00| seen| https://t.me/cvedetector/9507 2025-04-09 20:48:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11163...
CVE-2024-8553
CVE-2024-8553 affects Foreman/Satellite via loader macros in templates, enabling read access to the entire Foreman DB for authenticated users with template permissions. The issue is acknowledged in Red Hat advisories (RHSA-2024:8717/8718/8906) as an authentication bypass enabling read-only DB acc...
RHEL 8 : firefox (RHSA-2022:8553)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:8553 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
Security Bulletin: IBM Cloud Private is vulnerable to a Kubernetes vulnerability (CVE-2020-8553)
Summary IBM Cloud Private is vulnerable to a Kubernetes vulnerability Vulnerability Details CVEID: CVE-2020-8553 DESCRIPTION: Kubernetes ingress-nginx could allow a remote authenticated attacker to bypass security restrictions, caused by a flaw when the annotation...
CVE-2020-8553
Summary: The Kubernetes ingress-nginx controller prior to 0.28.0 is vulnerable when a user can create namespaces and read/write ingress objects. They can overwrite the password file of another ingress that uses basic auth (nginx.ingress.kubernetes.io/auth-type: basic) if the target ingress has a ...
CVE-2020-8553 Kubernetes ingress-nginx Compromise of auth via subset/superset namespace names
The Kubernetes ingress-nginx component prior to version 0.28.0 allows a user with the ability to create namespaces and to read and create ingress objects to overwrite the password file of another ingress which uses nginx.ingress.kubernetes.io/auth-type: basic and which has a hyphenated namespace ...
CVE-2019-8553
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2. Clicking a malicious SMS link may lead to arbitrary code execution...
Debian: Security Advisory (DSA-4497-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-4497-1 : linux - security update
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. - CVE-2015-8553 Jan Beulich discovered that CVE-2015-2150 was not completely addressed. If a PCI physical function is passed through to a Xen guest, th...
[SECURITY] [DSA 4497-1] linux security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4497-1 [email protected] https://www.debian.org/security/ Ben Hutchings August 13, 2019 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4497-1] linux security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4497-1 [email protected] https://www.debian.org/security/ Ben Hutchings August 13, 2019 https://www.debian.org/security/faq -...
Apple iOS < 12.2 Multiple Vulnerabilities (APPLE-SA-2019-3-25-1)
Binary data 700558.prm...
About the security content of watchOS 5.2
About the security content of watchOS 5.2 This document describes the security content of watchOS 5.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
Apple iOS < 12.2 Multiple Vulnerabilities
Binary data appleios122check.nbin...
About the security content of tvOS 12.2
About the security content of tvOS 12.2 This document describes the security content of tvOS 12.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
CVE-2018-8553
creationtimestamp| type| source ---|---|--- 2018-11-14 17:39:00+00:00| seen| MISP/5bec5b59-b2b0-4506-9c63-32a40a021402...
CVE-2018-8553
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012,...
CVE-2018-8553
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012,...
CVE-2018-8553
CVE-2018-8553 is a remote code execution vulnerability in how Microsoft Graphics Components handle memory objects. The flaw, affecting multiple Windows versions (Windows 7, Windows Server 2008/2012 family, Windows 8.1, Windows 10, Windows RT 8.1, and Windows Server 2016/2012 R2), stems from memor...