CVE-2023-28709

The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73 and 8.5.85 to 8.5.87. If non-default HTTP connector settings were used such that the maxParameterCount could be reached using query string parameters and a request was submitted...

CVE-2023-28709

The CVE-2023-28709 entry is tied to Apache Tomcat and an incomplete fix for CVE-2023-24998. The issue: when non-default HTTP connector settings allow maxParameterCount to be reached via query string parameters, a request that exactly meets maxParameterCount could bypass the limit for uploaded req...

CVE-2023-28709 Apache Tomcat: Fix for CVE-2023-24998 is incomplete

The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73 and 8.5.85 to 8.5.87. If non-default HTTP connector settings were used such that the maxParameterCount could be reached using query string parameters and a request was submitted...

CVE-2023-28709

The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73 and 8.5.85 to 8.5.87. If non-default HTTP connector settings were used such that the maxParameterCount could be reached using query string parameters and a request was submitted...

openSUSE 15 Security Update : mysql-connector-java (SUSE-SU-2023:2241-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2023:2241-1 advisory. - CVE-2023-21971: Fixed a crash in MySQL Connectors that could be triggered by an authenticated remote user bsc1211247. - Ship protobuf 3.9.2 compatible...

SUSE-SU-2023:2241-1 Security update for mysql-connector-java

This update for mysql-connector-java fixes the following issues: - CVE-2023-21971: Fixed a crash in MySQL Connectors that could be triggered by an authenticated remote user bsc1211247. - Ship protobuf 3.9.2 compatible generated files to support older distro versions. - Update to 8.0.32: -...

PT-2023-3207 · Snowflake · Snowflake-Connector-Nodejs

Name of the Vulnerable Software and Affected Versions: snowflake-connector-nodejs versions prior to 1.6.21 Description: The issue is related to a command injection vulnerability via single sign on SSO browser URL authentication. An attacker would need to establish a malicious resource and redirec...

CVE-2023-2679

Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data...

CVE-2023-2679

Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data...

Code injection

Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data...

CVE-2023-2679 Data leakage in Adobe connector for SPE edition of SLM

Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data...

CVE-2023-2679

CVE-2023-2679 affects Snow Software SPE 9.27.0 on Windows, via the Adobe connector, enabling a privileged user to observe other users’ data due to privilege-management issues. Official sources (NVD) cite data leakage with CVSS 3.1 base scores around 4.1–4.3 (MEDIUM). No patch/version fix is docum...

CVE-2023-2679 Data leakage in Adobe connector for SPE edition of SLM

Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data...

PT-2023-6623 · Snow +1 · Snow Software Spe +1

Name of the Vulnerable Software and Affected Versions: Snow Software SPE version 9.27.0 Description: The issue is related to data leakage in the Adobe connector of Snow Software SPE, allowing a privileged user to observe other users' data. This is connected to errors in privilege management. The...

Snow Software Software Asset Management Platform Enterprise 安全漏洞

Snow Software Software Asset Management Platform Enterprise SPE is a software asset management platform from Snow Software. It is an integrated solution designed to help organizations effectively manage and optimize their software assets. A security vulnerability exists in Snow Software Software...

kernel: drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector()

In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix a possible refcount leak in inteldpaddmstconnector If drmconnectorinit fails, intelconnectorfree will be called to take care of proper free. So it is necessary to drop the refcount of port before intelconnectorfree...

The vulnerability of the Azure Service Connector allows attackers to circumvent existing security restrictions and enhance their privileges.

The vulnerability of the Azure Service Connector relates to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and gain increased privileges...

The vulnerability of the Connector/J driver for MySQL Connectors of the Oracle MySQL database management system allows a hacker to gain access to read, modify, add, or delete data.

The vulnerability of the Connector/J driver for MySQL Connectors of the Oracle Database Management System exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to remotely gain access to read, modify, add, or delete data...

K000134573: MySQL vulnerability CVE-2023-21971

Security Advisory Description Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.32 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromis...

The vulnerability of the connection method to the LDAP server lies in the LDAP connector of the Java Remote Connector Server (RCS) and the OpenIDM identity management system. This vulnerability stems from the lack of protection for the transmitted data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the LDAP connection method lies in the lack of protection for the data transmitted. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information...