14193 matches found
WordPress BSD Split Pay for Stripe Connect on Woo plugin <= 3.2.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress BSD Split Pay for Stripe Connect on Woo plugin versions = 3.2.0. Solution Update the WordPress BSD Split Pay for Stripe Connect on Woo plugin to the latest available version at least 3.2.1...
Ubuntu 20.04 LTS : MariaDB vulnerabilities (USN-5305-1)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5305-1 advisory. Several security issues were discovered in MariaDB and this update includes new upstream MariaDB versions to fix these issues. MariaDB has been updated t...
Warning — Deadbolt Ransomware Targeting ASUSTOR NAS Devices
ASUSTOR network-attached storage NAS devices have become the latest victim of Deadbolt ransomware, less than a month after similar attacks singled out QNAP NAS appliances. In response to the infections, the company has released firmware updates ADM 4.0.4.RQO2 to "fix related security issues." The...
Bentley MicroStation CONNECT Out-of-Bounds Write Vulnerability (CNVD-2022-30759)
Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, Inc. Bentley MicroStation CONNECT 10.16.0.80 is vulnerable to an out-of-bounds write vulnerability when parsing DGN files, which could be exploited by remote attackers to exploit this...
Bentley MicroStation CONNECT Out-of-Bounds Write Vulnerability
Bentley Systems MicroStation is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, USA. Bentley MicroStation CONNECT 10.16.0.80 has an out-of-bounds write vulnerability when parsing DGN files. A remote attacker could exploit this vulnerability to execute arbitrary cod...
CVE-2021-43824 Null pointer dereference in envoy
Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions a crafted request crashes Envoy when a CONNECT request is sent to JWT filter configured with regex match. This provides a denial of service attack vector. The only workaround is to not use...
Security Bulletin: Code execution vulnerability in WebSphere Application Server affects IBM Spectrum Control (formerly Tivoli Storage Productivity Center) (CVE-2018-1851)
Summary There is a potential code execution vulnerability in WebSphere Application Server Liberty OpenID connect which affects IBM Spectrum Control formerly Tivoli Storage Productivity Center. Vulnerability Details CVEID: CVE-2018-1851 DESCRIPTION: IBM WebSphere Application Server OpenID Connect...
PT-2022-11913 · Envoy · Envoy
Name of the Vulnerable Software and Affected Versions: Envoy affected versions not specified Description: The issue affects Envoy, an open source edge and service proxy for cloud-native applications. A crafted request can crash Envoy when a CONNECT request is sent to the JWT filter configured wit...
Envoy 代码问题漏洞
Envoy is an open source distributed proxy server. Envoy suffers from a code issue vulnerability that stems from a crafted request crashing when a CONNECT request is sent to a JWT filter configured with regex matching in the affected version...
The vulnerability of the MariaDB database management system, related to buffer overflows in dynamic memory, allows attackers to execute arbitrary code.
The vulnerability of the MariaDB database management system is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code during request processing via CONNECT...
Security Bulletin: App Connect Professional is affected by Quick Emulator vulnerability
Summary App Connect Professional have addressed the following vulnerability reported in Quick Emulator Library. Vulnerability Details CVEID: CVE-2017-15124 DESCRIPTION: Quick Emulator QEMU is vulnerable to a denial of service, caused by an unbounded memory allocation issue in the VNC server...
Security Bulletin: WebSphere Cast Iron and App Connect Professional are affected by vulnerabilities in Pacemaker, ImageMagick, gd-libgd, libxslt, cURL libcurl , Ghostscript.
Summary WebSphere Cast Iron and App Connect Professional are affected by vulnerabilities in Pacemaker, ImageMagick, gd-libgd, libxslt, cURL libcurl , Ghostscript. These vulnerabilities are addressed in App connect professional v7.5.4.0 and v7.5.5.0, customer can migrate to these versions without...
CVE-2021-29656
Pexip Infinity Connect before 1.8.0 mishandles TLS certificate validation. The allow list is not properly checked...
CVE-2021-29656
Pexip Infinity Connect before 1.8.0 mishandles TLS certificate validation. The allow list is not properly checked...
CVE-2021-29655
Pexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks. Thus, untrusted code may execute...
CVE-2021-29655
Pexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks. Thus, untrusted code may execute...
CVE-2021-29655
Pexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks. Thus, untrusted code may execute...
Code injection
Pexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks. Thus, untrusted code may execute...