2570 matches found
CVE-2023-39325 vulnerabilities
Vulnerabilities for packages: metacontroller, stakater-reloader, yq, gomplate, oauth2-proxy, secrets-store-csi-driver-provider-gcp, prometheus-blackbox-exporter, sigstore-scaffolding, aactl, git-lfs, kubescape, terraform-provider-sendgrid, crossplane-provider-azure, fuse-overlayfs-snapshotter,...
Kibana Upgrade Assistant Telemetry Collector Prototype Pollution
Kibana before version 7.6.3 suffers from a prototype pollution bug within the Upgrade Assistant. By setting a new constructor.prototype.sourceURL value we're able to execute arbitrary code. Code execution is possible through two different ways. Either by sending data directly to Elastic, or using...
CVE-2022-22447
IBM Disconnected Log Collector 1.0 through 1.8.2 is vulnerable to potential security misconfigurations that could disclose unintended information. IBM X-Force ID: 224648...
CVE-2022-22447
IBM Disconnected Log Collector 1.0 through 1.8.2 is vulnerable to potential security misconfigurations that could disclose unintended information. IBM X-Force ID: 224648...
Code injection
IBM Disconnected Log Collector 1.0 through 1.8.2 is vulnerable to potential security misconfigurations that could disclose unintended information. IBM X-Force ID: 224648...
IBM Disconnected Log Collector Security Vulnerability
IBM Disconnected Log Collector is a log collector from International Business Machines IBM. IBM Disconnected Log Collector suffers from a security vulnerability that stems from susceptibility to potential security misconfigurations that could disclose unexpected information...
CVE-2022-22447 IBM Disconnected Log Collector information disclosure
IBM Disconnected Log Collector 1.0 through 1.8.2 is vulnerable to potential security misconfigurations that could disclose unintended information. IBM X-Force ID: 224648...
CVE-2022-22447
The vulnerability CVE-2022-22447 affects IBM Disconnected Log Collector versions 1.0–1.8.2. The issue is described as security misconfigurations that could disclose unintended information. Remediation provided in the PT-2023-12698 entry recommends updating to IBM Disconnected Log Collector v1.8.3...
CVE-2022-22447 IBM Disconnected Log Collector information disclosure
IBM Disconnected Log Collector 1.0 through 1.8.2 is vulnerable to potential security misconfigurations that could disclose unintended information. IBM X-Force ID: 224648...
ICP DAS ET-7060 Code Issue Vulnerability
The ICP DAS ET-7060 is a data collector from ICP DAS. A code issue vulnerability exists in ICP DAS ET-7060 version 3.00, which stems from an arbitrary file upload vulnerability...
PT-2023-12698 · Ibm · Ibm Disconnected Log Collector
Name of the Vulnerable Software and Affected Versions: IBM Disconnected Log Collector versions 1.0 through 1.8.2 Description: The issue is related to potential security misconfigurations that could disclose unintended information. There is no information provided about the estimated number of...
Mageia: Security Advisory (MGASA-2023-0272)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated java packages fix security vulnerabilities
The updated packages fix security vulnerabilities and a file conflict : Improper connection handling during TLS handshake. CVE-2023-21930 Incorrect enqueue of references in garbage collector. CVE-2023-21954 Certificate validation issue in TLS session negotiation. CVE-2023-21967 Swing HTML parsing...
MGASA-2023-0272 Updated java packages fix security vulnerabilities
The updated packages fix security vulnerabilities and a file conflict : Improper connection handling during TLS handshake. CVE-2023-21930 Incorrect enqueue of references in garbage collector. CVE-2023-21954 Certificate validation issue in TLS session negotiation. CVE-2023-21967 Swing HTML parsing...
Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. This update addresses these CVEs. Vulnerability Details CVEID:CVE-2022-21724 DESCRIPTION: PostgreSQL JDBC Driver PgJDBC could allow a remote authenticated attack...
Security Bulletin: CVE-2022-40609 may affect Java Technology Edition used by Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint
Summary CVE-2022-40609 vulnerability in Java Technology Edition could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw by sending specially-crafted data. Vulnerability Details CVEID:CVE-2022-40609 DESCRIPTION: IBM SDK, Java Technology Editi...
Security Bulletin: CVE-2023-34396 may affect Apache Struts used by Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint.
Summary CVE-2023-34396 reported in Apache Struts used by Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint Vulnerability Details CVEID:CVE-2023-34396 DESCRIPTION: Apache Struts is vulnerable to a denial of service, caused by a flaw when...
Security Bulletin: CVE-2023-34149 may affect Apache Struts used by Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint
Summary CVE-2023-34149 reported in Apache Struts used by Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint. Vulnerability Details CVEID:CVE-2023-34149 DESCRIPTION: Apache Struts is vulnerable to a denial of service, caused by a flaw wit...
Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint
Summary Multiple vulnerabilities were disclosed in the Oracle April 2023 Quarterly CPU Update. Vulnerability Details CVEID:CVE-2023-21930 DESCRIPTION: An unspecified vulnerability in Oracle Java SE, Oracle GraalVM Enterprise Edition related to the JSSE component could allow an unauthenticated...
