8981 matches found
Improper Authentication In Apache NiFi
In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, if an anonymous user request is replicated to another node, the originating node identity is used rather than the "anonymous" user...
GHSA-JGJ9-6V78-6G8M Improper Authentication In Apache NiFi
In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, if an anonymous user request is replicated to another node, the originating node identity is used rather than the "anonymous" user...
JSON-Patch Out-of-bounds Write vulnerability
An out of bound write can occur when patching an Openshift object using the oc patch functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management...
GHSA-GXHV-3HWF-WJP9 JSON-Patch Out-of-bounds Write vulnerability
An out of bound write can occur when patching an Openshift object using the oc patch functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management...
GHSA-R9FV-QPM9-RJ4G Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
Elasticsearch Alerting and Monitoring in versions before 6.4.1 or 5.6.12 have an information disclosure issue when secrets are configured via the API. The Elasticsearch cluster/settings API, when queried, could leak sensitive configuration information such as passwords, tokens, or usernames. This...
Vulnerability fixed in PostgreSQL
The developers of PostgreSQL have fixed a vulnerability in PostgreSQL. It was found that certain commands such as Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER and pgamcheck do not handle permissions correctly, allowing a user to can execute these commands outside the scop...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.7.50 security update
Red Hat OpenShift Container Platform release 4.7.50 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.7 Red Hat Product Security has rated this update as having a...
May 10, 2022—KB5014018 (Security-only update)
None None...
UBUNTU-CVE-2022-1552
A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pgamcheck commands activated relevant protections too late or no...
The vulnerability of the Failover Cluster component for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Failover Cluster component for Windows operating systems is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Vulnerability in core server (CVE-2022-1552)
Autovacuum, REINDEX, and others omit "security restricted operation" sandbox Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pgamcheck made incomplete efforts to operate safely when a privileged user is maintaining another user's objects. Those commands activated releva...
PT-2022-2514 · Unknown +11 · Postgresql +10
Name of the Vulnerable Software and Affected Versions: PostgreSQL affected versions not specified Description: A flaw was found in PostgreSQL related to incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRES...
Apache Tomcat 资源管理错误漏洞
Apache Tomcat is a lightweight Web application server from the Apache Foundation in the United States. The program implements support for Servlet and JavaServer Page JSP. Apache Tomcat suffers from a denial-of-service vulnerability that stems from a flaw in the configuration of Tomcat open...
CVE-2022-29150
Windows Cluster Shared Volume CSV Elevation of Privilege Vulnerability...
CVE-2022-29151
Windows Cluster Shared Volume CSV Elevation of Privilege Vulnerability...
CVE-2022-29150
Windows Cluster Shared Volume CSV Elevation of Privilege Vulnerability...
CVE-2022-29151
Windows Cluster Shared Volume CSV Elevation of Privilege Vulnerability...
CVE-2022-29151
Windows Cluster Shared Volume CSV Elevation of Privilege Vulnerability...