CVE-2023-28725: Unrestricted Upload of File with Dangerous Type

General Bytes Crypto Application Server CAS 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execute arbitrary Java code by uploading a Java application to the /batm/app/admin/standalone/deployments directory, aka BATM-4780, as exploited in the wild in March...

CVE-2023-28725

The General Bytes Crypto Application Server (CAS) version 20230120, distributed with BATM devices , contains a vulnerability (BATM-4780) that allows remote attackers to execute arbitrary Java code . The root cause is the unrestricted upload of Java applications to the /batm/app/admin/standalone/d...

K15623: GnuTLS vulnerability CVE-2009-5138

Security Advisory Description GnuTLS before 2.7.6, when the GNUTLSVERIFYALLOWX509V1CACRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new...

CVE-2022-29523

Improper conditions check in the Open CAS software maintained by IntelR before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-29523

Improper conditions check in the Open CAS software maintained by IntelR before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access...

Design/Logic Flaw

Improper conditions check in the Open CAS software maintained by IntelR before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-29523

Improper conditions check in the Open CAS software maintained by IntelR before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-29523

CVE-2022-29523 affects Intel Open CAS software prior to version 22.3.1. It stems from an improper conditions check in the Open CAS code, which may allow an authenticated user to cause a denial of service via local access. The issue is categorized with a Base Score of 3.3 (Low) by Intel/NVD, with ...

CVE-2022-29523: Improper Check for Unusual or Exceptional Conditions

Improper conditions check in the Open CAS software maintained by IntelR before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access...

PT-2023-12976 · Intel · Opencats

Name of the Vulnerable Software and Affected Versions: Open CAS software maintained by IntelR versions prior to 22.3.1 Description: The issue is related to an improper conditions check in the software, which may allow an authenticated user to potentially enable denial of service via local access...

Intel Open CAS 代码问题漏洞

Intel Open CAS is an open source project of Intel Intel, USA. It accelerates I/O bound business applications. A security vulnerability exists in Intel Open CAS versions prior to 22.3.1, which stems from an improper conditional checking in the software and can be exploited by an attacker to covert...

SUSE CVE-2010-1618

Cross-site scripting XSS vulnerability in the phpCAS client library before 1.1.0, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled in an error message...

Open CAS Advisory

Summary: A potential security vulnerability in the Open Cache Acceleration Software CAS maintained by Intel may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-29523 Description: Improper conditions chec...

SUSE: Security Advisory (SUSE-SU-2023:0139-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in cas-core-renderer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26d20be8c341ff87fc8ce4d2871dea36d7e1f5d778de7bc62e991d54c73764b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE-SU-2023:0003-1 Security update for ca-certificates-mozilla

This update for ca-certificates-mozilla fixes the following issues: - Updated to 2.60 state of Mozilla SSL root CAs bsc1206622 Removed CAs: - Global Chambersign Root - EC-ACC - Network Solutions Certificate Authority - Staat der Nederlanden EV Root CA - SwissSign Platinum CA - G2 Added CAs: -...

Malicious code in ent-cas-form-navigation-buttons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b76254963f588f5a71a7483ecb0f970c5db705214cb7a836d484b8d7ec0b2b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE-SU-2022:4625-1 Security update for ca-certificates-mozilla

This update for ca-certificates-mozilla fixes the following issues: - Updated to 2.60 state of Mozilla SSL root CAs bsc1206622 Removed CAs: - Global Chambersign Root - EC-ACC - Network Solutions Certificate Authority - Staat der Nederlanden EV Root CA - SwissSign Platinum CA - G2 Added CAs: -...

Fedora 35 : php-pear-CAS (2022-76b3530ac2)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-76b3530ac2 advisory. Changes in version 1.6.0 Bug Fixes: Introduce required servicename constructor argument to fix service hostname discovery exploitation vulnerability...

Fedora 36 : php-pear-CAS (2022-37c2d26f59)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-37c2d26f59 advisory. Changes in version 1.6.0 Bug Fixes: Introduce required servicename constructor argument to fix service hostname discovery exploitation vulnerability...