1866 matches found
PT-2022-15036
Name of the Vulnerable Software and Affected Versions Frontier versions prior to commit 8a93fdc6c9f4eb1d2f2a11b7ff1d12d70bf5a664 Description A bug in Frontier's MODEXP precompile implementation can cause an integer underflow in certain conditions. This will cause a node crash for debug builds. Fo...
Jenkins 表çŤčŻˇćąäźŞé ćźć´
Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plug-ins to support building, deploying and automating any project . Jenkins has a cross-site request forgery vulnerability that stems from the WEB application not adequately verifying tha...
Citrix ADC upgrade operations might cause login failure for local system user accounts
Any of the following Citrix ADC upgrade operations might cause login failure for local system user accounts: from Citrix ADC 13.0-83.x buildor later buildsto Citrix ADC 13.1-4.x build from Citrix ADC 12.1-63.x buildor later buildsto Citrix ADC 13.1-4.x build from Citrix ADC 12.1-63.x buildor late...
UBUNTU-CVE-2021-45463
loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIM...
CVE-2021-45463
loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIM...
CVE-2020-8105
OS Command Injection vulnerability in the wirelessConnect handler of Abode iota All-In-One Security Kit allows an attacker to inject commands and gain root access. This issue affects: Abode iota All-In-One Security Kit versions prior to 1.0.2.236.9Vdevt2homekitRF2.0.19s2kvsABODE oz...
Qt 5.12.2 through 5.14.2 as used in unofficial builds of Mumble 1.3.0 and other products mishandles OpenSSL's error queue which can cause a denial of service to QSslSocket users. Because errors leak in unrelated TLS sessions an unrelated session may be disconnected when any handshake fails. (Mumble 1.3.1 is not affected regardless of the Qt version.)
...
December 14, 2021âKB5008212 (OS Builds 19041.1415, 19042.1415, 19043.1415, and 19044.1415)
None None...
Authentication flaw
Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in December 2021. For Enterprise builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For Enterprise builds 10.1.2128.0 through 10.1.2137.2,...
PYSEC-2021-840
A dependency confusion vulnerability was reported in the Antilles open-source software prior to version 1.0.1 that could allow for remote code execution during installation due to a package listed in requirements.txt not existing in the public package index PyPi. MITRE classifies this weakness as...
Important: Red Hat Security Advisory: OpenJDK 17.0.1 security update for Windows Builds
The Red Hat Build of OpenJDK 17 java-17-openjdk is now available for Windows. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
CVE-2021-22870
A path traversal vulnerability was identified in GitHub Pages builds on GitHub Enterprise Server that could allow an attacker to read system files. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. Th...
PT-2021-15243
Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.3 GitHub Enterprise Server version 3.0 through 3.0.18 GitHub Enterprise Server version 3.1 through 3.1.10 GitHub Enterprise Server version 3.2 through 3.2.2 Description A path traversal issue was...
November 9, 2021âKB5007186 (OS Builds 19041.1348, 19042.1348, and 19043.1348)
None None...
October 26, 2021âKB5006738 (OS Builds 19041.1320, 19042.1320, and 19043.1320) Preview
None None...
Important: Red Hat Security Advisory: OpenJDK 11.0.13 security update for Portable Linux Builds
The Red Hat Build of OpenJDK 11 java-11-openjdk is now available for portable Linux. Red Hat Product Security has rated this update as having a security impact of Imporant. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Important: Red Hat Security Advisory: OpenJDK 8u312 security update for Portable Linux Builds
The Red Hat Build of OpenJDK 8 java-1.8.0-openjdk is now available for portable Linux. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Security update for containerd, docker, runc (important)
openSUSE Security Update: Security update for containerd, docker, runc Announcement ID: openSUSE-SU-2021:3506-1 Rating: important References: 1102408 1185405 1187704 1188282 1190826 1191015 1191121 1191334 1191355 1191434 Cross-References: CVE-2021-30465 CVE-2021-32760 CVE-2021-41089 CVE-2021-410...
jenkins: improper permission checks allow canceling queue items and aborting builds
Incorrect Authorization vulnerability was found in Jenkins. Users with Item/Cancel permission are able to cancel queue items and abort builds of jobs even when they do not have Item/Read permission...