975 matches found
CVE-2023-6400
Incorrect Authorization vulnerability in OpenText™ ZENworks Configuration Management ZCM allows Unauthorized Use of Device Resources.This issue affects ZENworks Configuration Management ZCM versions: 2020 update 3, 23.3, and 23.4...
CVE-2023-6400 Incorrect user authorization vulnerability on OpenText ZENworks Configuration Management (ZCM) product.
Incorrect Authorization vulnerability in OpenText™ ZENworks Configuration Management ZCM allows Unauthorized Use of Device Resources.This issue affects ZENworks Configuration Management ZCM versions: 2020 update 3, 23.3, and 23.4...
CVE-2023-6400
CVE-2023-6400 concerns an incorrect authorization vulnerability in OpenText ZENworks Configuration Management (ZCM). Affected are ZCM versions: 2020 update 3, 23.3, and 23.4. The root cause is improper authorization checks, enabling unauthorized use of device resources. Practical impact is high (...
CVE-2023-6400 Incorrect user authorization vulnerability on OpenText ZENworks Configuration Management (ZCM) product.
Incorrect Authorization vulnerability in OpenText™ ZENworks Configuration Management ZCM allows Unauthorized Use of Device Resources.This issue affects ZENworks Configuration Management ZCM versions: 2020 update 3, 23.3, and 23.4...
Micro Focus ZENworks Configuration Management 安全漏洞
Micro Focus ZENworks Configuration Management is an endpoint device management software from Micro Focus UK that provides a single management platform for all of a user's endpoint devices, reducing costs and improving IT. A security vulnerability exists in Micro Focus ZENworks Configuration...
Moderate: Red Hat Security Advisory: Red Hat Satellite 6 security and bug fix update
An update is now available for Red Hat Satellite 6.13 for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Puppet Security Vulnerabilities
Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the United States, which can be used to manage configuration files, users, cron tasks, packages, system services, and so on. A security vulnerability exists in Puppet versions prior to...
Tencent Blueking CMDB Security Vulnerability
Tencent Blueking CMDB is a configuration management database system from Tencent, China. A security vulnerability exists in Tencent Blueking CMDB versions v3.2.x through v3.9.x, which stems from /service/subscription.go contains a server-side request forgery vulnerability that allows an attacker ...
Security Bulletin: The IBM® Engineering Lifecycle Engineering product using IBM SDK, Java Technology Edition Quarterly CPU - Jan 2024 - Includes Oracle January 2024 CPU is vulnerable to CVE-2023-33850
Summary This bulletin covers all applicable Java SE CVEs published by Oracle as part of their January 2024 Critical Patch Update, plus CVE-2023-33850. Following IBM® Engineering Lifecycle Engineering products are vulnerable to this attack: Jazz Foundation, IBM Jazz Reporting Service, IBM...
[SECURITY] Fedora 39 Update: ansible-core-2.16.2-2.fc39
Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...
Fedora: Security Advisory (FEDORA-2024-0d894565a0)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 38 Update: ansible-core-2.14.11-2.fc38
Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...
Security Bulletin: The IBM® Engineering Lifecycle Engineering products using IBM SDK, Java Technology Edition Quarterly CPU - Oct 2023 - Includes Oracle October 2023 CPU plus are vulnerable to CVE-2023-5676
Summary There are multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition that is shipped with IBM WebSphere Application Server and IBM WebSphere Application Server Liberty. Following IBM® Engineering Lifecycle Engineering products are vulnerable to this attack, it has been addressed i...
Security Bulletin: The IBM® Engineering Lifecycle Engineering products using WebSphere Application Server Liberty is vulnerable to information disclosure due to Apache Santuario (CVE-2023-44483)
Summary There is a vulnerability in the Apache Santuario library used by IBM WebSphere Application Server Liberty when the wsSecurity-1.1, wsSecuritySaml-1.1 or samlWeb-2.0 feature is enabled. Following IBM® Engineering Lifecycle Engineering products are vulnerable to this attack, it has been...
[SECURITY] Fedora 39 Update: ansible-core-2.16.2-1.fc39
Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...
[SECURITY] Fedora 39 Update: ansible-9.1.0-1.fc39
Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...
VulnCheck KEV: CVE-2021-29442
Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly...
The vulnerability of the Ansible configuration management system, related to improper code generation, allows a attacker to execute arbitrary code.
The vulnerability of the Ansible configuration management system is related to incorrect code generation during template processing. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Qualys API Best Practices: Policy Compliance – Posture Streaming (PCRS) API
This API Best Practices Series is designed for Qualys customer programmers or stakeholders with a general knowledge of programming who want to implement best practices for improving the development, design, and performance of their programs that use the Qualys API. For non-customers, the Qualys A...
