14179 matches found
CVE-2022-38131
RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. The vulnerability could allow an attacker to redirect users to malicious websites...
Open redirect
RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. The vulnerability could allow an attacker to redirect users to malicious websites...
CVE-2022-38131
RStudio Connect prior to 2023.01.0 is affected by an Open Redirect vulnerability. The issue could allow an attacker to redirect users to malicious websites. Affected components are the RStudio Connect web interface and related redirect logic; root cause is improper handling of redirects. Impacts ...
PT-2022-24225 · Rstudio · Rstudio Connect
Name of the Vulnerable Software and Affected Versions: RStudio Connect versions prior to 2023.01.0 Description: The issue is an Open Redirect problem that could allow an attacker to redirect users to malicious websites. Recommendations: For versions prior to 2023.01.0, update to version 2023.01.0...
CVE-2022-38131
RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. The vulnerability could allow an attacker to redirect users to malicious websites...
RStudio Connect 输入验证错误漏洞
RStudio Connect is a publishing platform from RStudio, Inc. For work created by your team in R and Python. RStudio Connect is vulnerable to an input validation error. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...
mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer
MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the...
mariadb: lack of proper validation of a user-supplied string before using it as a format specifier
MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...
mariadb: CONNECT storage engine heap-based buffer overflow
A flaw was found in MariaDB. Lack of input validation leads to a heap buffer overflow. This flaw allows an authenticated, local attacker with at least a low level of privileges to submit a crafted SQL query to MariaDB and escalate their privileges to the level of the MariaDB service user, running...
DEBIAN-CVE-2022-1247
An issue found in linux-kernel that leads to a race condition in roseconnect. The rose driver uses roseneigh-use to represent how many objects are using the roseneigh. When a user wants to delete a roseroute via roseioctl, the rose driver calls rosedelnode and removes neighbours only if their...
CVE-2022-1247
An issue found in linux-kernel that leads to a race condition in roseconnect. The rose driver uses roseneigh-use to represent how many objects are using the roseneigh. When a user wants to delete a roseroute via roseioctl, the rose driver calls rosedelnode and removes neighbours only if their...
Nextcloud: [user_oidc] Stored XSS via Authorization Endpoint - Safari-Only
Summary: The OpenID Connect User Backend allows users to login to Nextcloud using SSO. A workaround that was apparently implemented for the Safari browser enables stored Cross-Site-Scripting XSS. The vulnerability only affects user agents that include "Safari" within their user agent string and i...
Nextcloud: [user_oidc] Unencrypted Communications
The OpenID Connect User Backend allows users to login to Nextcloud using SSO and is - according to the policy - part of the main scope of this program. The implementation supports plain HTTP without TLS and transfers sensitive information such as OIDC clientsecrets in an unencrypted manner...
Security Bulletin: IBM Integration Bus and IBM App Connect Enterprise are vulnerable to a denial of service due to jackson-databind (CVE-2020-36518)
Summary IBM Integration Bus and IBM App Connect Enterprise are vulnerable to a denial of service due to jackson-databind, caused by a Java StackOverflow exception. The fix includes jackson-databind 2.13.3 Vulnerability Details CVEID:CVE-2020-36518 DESCRIPTION: FasterXML jackson-databind is...
PT-2025-25869
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc7+ Description A lockdep violation has been resolved in the Linux kernel. The issue was caused by the scope of udc mutex being too large, which led to a possible circular locking dependency. The problem...
CVE-2021-43766
Odyssey passes to server unencrypted bytes from man-in-the-middle When Odyssey is configured to use certificate Common Name for client authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate...
Security Bulletin:A Security vulnerability has been identified in IBM WebSphere Application Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud (CVE-2016-0283)
Summary There is a cross-site scripting vulnerability in WebSphere Application Server Liberty when using the OpenID Connect OIDC client. Vulnerability Details Please consult the security bulletin Security Bulletin: Cross-site scripting vulnerability in the OpenID Connect client web application...
Malicious Package
Overview amazon-connect-reference-dialer is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable i...