Fedora: Security Advisory for firefox (FEDORA-2023-75b98848b2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Breaking the Security "Black Box" in DBs, Data Warehouses and Data Lakes

Security teams typically have great visibility over most areas, for example, the corporate network, endpoints, servers, and cloud infrastructure. They use this visibility to enforce the necessary security and compliance requirements. However, this is not the case when it comes to sensitive data...

Breaking the Security "Black Box" in DBs, Data Warehouses and Data Lakes

Security teams typically have great visibility over most areas, for example, the corporate network, endpoints, servers, and cloud infrastructure. They use this visibility to enforce the necessary security and compliance requirements. However, this is not the case when it comes to sensitive data...

[SECURITY] Fedora 37 Update: firefox-110.0-3.fc37

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

SUSE CVE-2021-28164

In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to /context/%2e/WEB-INF/web.xml can retrieve the web.xml file. This ca...

SUSE CVE-2021-38155

OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x before 18.0.1, and 19.x before 19.0.1 allows information disclosure during account locking related to PCI DSS features. By guessing the name of an account and failing to authenticate multiple times, any unauthenticated...

CVE-2022-29557

LexisNexis Firco Compliance Link 3.7 allows CSRF...

CVE-2022-29557

LexisNexis Firco Compliance Link 3.7 allows CSRF...

Cross site request forgery (csrf)

LexisNexis Firco Compliance Link 3.7 allows CSRF...

LexisNexis Firco Compliance Link 跨站请求伪造漏洞

LexisNexis Firco Compliance Link is an application from LexisNexis, Inc. for automating the online compliance process. A security vulnerability exists in LexisNexis Firco Compliance Link version 3.7 that stems from the presence of SRF...

CVE-2022-29557

LexisNexis Firco Compliance Link 3.7 allows CSRF...

CVE-2022-29557

CVE-2022-29557 affects LexisNexis Firco Compliance Link 3.7. The linked documents describe a Cross‑Site Request Forgery (CSRF) vulnerability in this product/version, with a reported CVSS v3.1 base score of 8.8 (HIGH) and an impact on confidentiality, integrity, and availability. The attack requir...

PT-2023-12978 · Lexisnexis · Lexisnexis Firco Compliance Link

Name of the Vulnerable Software and Affected Versions: LexisNexis Firco Compliance Link version 3.7 Description: The issue allows for Cross-Site Request Forgery CSRF attacks. Recommendations: For LexisNexis Firco Compliance Link version 3.7, update to a newer version that contains a fix for this...

SAP GRC 安全漏洞

SAP GRC is a suite of solutions and products from SAP Germany. It helps you manage enterprise resources in a way that minimizes risk, builds trust, and reduces compliance costs. A security vulnerability exists in SAP GRC that stems from the Remote Enablement Functional Module that enables an...

CVE-2022-29557

LexisNexis Firco Compliance Link 3.7 allows CSRF...

PT-2023-15951 · Sap · Sap Grc

Name of the Vulnerable Software and Affected Versions: SAP GRC Process Control versions GRCFND A V8100 through GRCFND A V1200 SAP GRC Process Control versions GRCPINW V1100 700 through GRCPINW V1200 750 Description: The issue allows an authenticated attacker with minimal privileges to access all...

CVE-2022-34454

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerability, leading to system takeover. This impacts compliance mode clusters...

CVE-2022-34454

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerability, leading to system takeover. This impacts compliance mode clusters...

Heap overflow

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerability, leading to system takeover. This impacts compliance mode clusters...

CVE-2022-34454

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerability, leading to system takeover. This impacts compliance mode clusters...