After updating Veeam Backup & Replication, Mine repository fails to update

End-of-Life Product Nutanix Mine with Veeam reached End-of-Life on 2026-04-30. As of this date, all support services for this product are unavailable. For more information, see the Nutanix EOL Announcement Bulletin - Nutanix Mine, released 2025-04-30. Challenge After installing an update to Veeam...

Cross site scripting

This affects the package @yaireo/tagify before 4.9.8. The package is used for rendering UI components inside the input or text fields, and an attacker can pass a malicious placeholder value to it to fire the XSS payload...

CVE-2022-25854

The CVE affects @yaireo/tagify before 4.9.8. The root cause is that the placeholder input is not escaped in the Tagify rendering logic (tagify.js), enabling an attacker to inject and trigger XSS via a malicious placeholder value. Impact is XSS in inputs using Tagify; exploitation details are not ...

CVE-2022-25854 Cross-site Scripting (XSS)

This affects the package @yaireo/tagify before 4.9.8. The package is used for rendering UI components inside the input or text fields, and an attacker can pass a malicious placeholder value to it to fire the XSS payload...

CVE-2022-25854 Cross-site Scripting (XSS)

This affects the package @yaireo/tagify before 4.9.8. The package is used for rendering UI components inside the input or text fields, and an attacker can pass a malicious placeholder value to it to fire the XSS payload...

@2dine/framework-ui (>=1.0.4, <=2.1.91), @gesdisc/components (>=1.0.0, <=1.0.74) +20 more potentially affected by CVE-2022-25854 via @yaireo/tagify (>=2.31.6, <=3.25.0)

@yaireo/tagify NPM version =2.31.6, =1.0.4, =1.0.0, =1.0.8, =0.0.1-dev.0, =1.0.97, =1.0.0, =0.22.0, =1.3.0, =0.0.1, =0.0.2, =0.9.0, =0.0.1, =0.3.0, =0.6.0 and more Source cves: CVE-2022-25854 Source advisory: MEND:CVE-2022-25854...

CVE-2022-29947: Improper Neutralization of Input During Web Page Generation

Woodpecker before 0.15.1 allows XSS via build logs because web/src/components/repo/build/BuildLog.vue lacks escaping...

CVE-2022-28196

NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blobdecompress function, where insufficient validation of untrusted data may allow a local attacker with elevated privileges to cause a memory buffer overflow, which may lead to code execution, limited loss of Integrity, and...

Buffer overflow

NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blobdecompress function, where insufficient validation of untrusted data may allow a local attacker with elevated privileges to cause a memory buffer overflow, which may lead to code execution, limited loss of Integrity, and...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM InfoSphere Master Data Management (CVE-2015-1788, CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1792)

Summary OpenSSL vulnerabilities were disclosed on Jun 11, 2015 by the OpenSSL Project. OpenSSL is used by IBM InfoSphere Master Data Management and has addressed the applicable CVEs provided by OpenSSL Vulnerability Details CVEID: CVE-2015-1788 DESCRIPTION: OpenSSL is vulnerable to a denial of...

OSV-2022-378 UNKNOWN READ in fp_cmp_mag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47009 Crash type: UNKNOWN READ Crash state: fpcmpmag crtmgrtrustlistlookup crtmgradd...

cloud.genesys:web-messaging-sdk (>=3.0.0, <=5.0.0), cn.acooly:acooly-auth-wechat-authenticator (>=5.2.1, <=5.2.2) +405 more potentially affected by CVE-2022-24891 via org.owasp.esapi:esapi (>=2.0.1, <=2.2.3.1)

org.owasp.esapi:esapi MAVEN version =2.0.1, =3.0.0, =5.2.1, =5.2.1, =5.2.1, =5.2.1, =5.2.1, =5.2.1, =5.2.1, =5.2.1, =5.2.1, =5.2.1, =5.2.1, =5.2.1, =5.2.2 - com.acooly:acooly-component-holiday 5.2.2 and more Source cves: CVE-2022-24891 Source advisory: MEND:CVE-2022-24891...

CVE-2022-26111

The BeanShell components of IRISNext through 9.8.28 allow execution of arbitrary commands on the target server by creating a custom search or editing an existing/predefined search of the documents. The search components permit adding BeanShell expressions that result in Remote Code Execution in t...

Xiaomi Content Center security vulnerabilities

Xiaomi Content Center Xiaomi Content Center is a content center of Xiaomi China, Inc. An incorrect permission configuration vulnerability exists in Xiaomi Content Center APP, which is caused by the lack of proper permission validation in Xiaomi Content Center APP, and can be exploited by attacker...

Rockwell Automation Code Execution

The vulnerabilities of the software for designing and configuring controllers in the Connected Components Workbench, the workstations for automated safety systems called Safety Instrumented Systems Workstations, and the application development environment for programmable logic controllers in the...

Oracle Critical Patch Update Advisory - April 2022

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. These patches address vulnerabilities in Oracle code and in third-party components included in Oracle products. These patches are usually cumulative, but each advisory describes only the security patches add...

Microsoft Windows Graphics Component Information Disclosure Vulnerability (CNVD-2022-74592)

Microsoft Graphics Components is a graphics driver component of Microsoft Corporation USA.An information disclosure vulnerability exists in Microsoft Windows Graphics Components. The vulnerability stems from errors in the configuration of the network system or product during operation. An attacke...

Microsoft Windows Graphics Component Remote Code Execution Vulnerability (CNVD-2022-74593)

A remote code execution vulnerability exists in Microsoft Windows Graphics Components, which originates when a network system or product fails to properly filter external input data during the construction of code segments. elements during the construction of code segments from external input dat...

Red Lion DA50N

1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Red Lion Equipment: DA50N Vulnerabilities: Insufficient Verification of Data Authenticity, Weak Password Requirements, Use of Unmaintained Third-Party Components, Insufficiently Protected Credentials 2...

Siemens SCALANCE X-300 Switch Family Devices缓冲区溢出漏洞

SCALANCE X switches are used to connect to industrial components such as programmable logic controllers PLCs or human-machine interfaces HMIs.SIPLUS extreme is designed for reliable operation under extreme conditions.A buffer overflow vulnerability exists in Siemens SCALANCE X-300 Switch Family...