8958 matches found
GHSA-4WFH-48V4-3R84 Cross-site Scripting in Apache Hama
Missing input validation in Apache Hama may cause information disclosure through path traversal and XSS. Since Apache Hama is EOL, we do not expect these issues to be fixed...
CVE-2022-45470
missing input validation in Apache Hama may cause information disclosure through path traversal and XSS. Since Apache Hama is EOL, we do not expect these issues to be fixed...
PT-2022-27526 · Apache · Apache Hama
Name of the Vulnerable Software and Affected Versions: Apache Hama affected versions not specified Description: The issue is related to missing input validation in Apache Hama, which may cause information disclosure through path traversal and cross-site scripting XSS. Since Apache Hama is...
CVE-2022-44001
An issue was discovered in BACKCLICK Professional 5.9.63. User authentication for accessing the CORBA back-end services can be bypassed...
Authentication flaw
An issue was discovered in BACKCLICK Professional 5.9.63. User authentication for accessing the CORBA back-end services can be bypassed...
CVE-2022-44001
An issue was discovered in BACKCLICK Professional 5.9.63. User authentication for accessing the CORBA back-end services can be bypassed...
November 17, 2022—KB5021654 (OS Build 14393.5502) Out-of-band
None None...
PT-2022-27063 · Unknown · Backclick Professional
Name of the Vulnerable Software and Affected Versions: BACKCLICK Professional version 5.9.63 Description: An issue was discovered where user authentication for accessing the CORBA back-end services can be bypassed. Recommendations: For BACKCLICK Professional version 5.9.63, at the moment, there i...
CVE-2022-44008
An issue was discovered in BACKCLICK Professional 5.9.63. Due to improper validation, arbitrary local files can be retrieved by accessing the back-end Tomcat server directly...
PT-2022-27070 · Apache · Apache Tomcat
Name of the Vulnerable Software and Affected Versions: BACKCLICK Professional version 5.9.63 Description: An issue was discovered due to improper validation, allowing arbitrary local files to be retrieved by accessing the back-end Tomcat server directly. Recommendations: For BACKCLICK Professiona...
F5 Networks BIG-IP : Appliance mode iControl REST vulnerability (K13325942)
The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.3 / 15.1.8.1 / 16.1.3.3 / 17.0.0.2 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K13325942 advisory. - In all versions of BIG-IP, when running in Appliance mode, an authenticated user...
kernel: net: preserve skb_end_offset() in skb_unclone_keeptruesize()
In the Linux kernel, the following vulnerability has been resolved: net: preserve skbendoffset in skbunclonekeeptruesize syzbot found another way to trigger the infamous WARNONONCEdelta truesize value, we also need to make sure TCP wont fill new tailroom that pskbexpandhead was able to get from a...
November 15, 2022—KB5020030 (OS Builds 19042.2311, 19043.2311, 19044.2311, and 19045.2311) Preview
None None...
GHSA-G2QW-6VRR-V6PQ Apache Jena vulnerable to Deserialization of Untrusted Data
Apache Jena SDB 3.17.0 and earlier is vulnerable to a JDBC Deserialisation attack if the attacker is able to control the JDBC URL used or cause the underlying database server to return malicious data. The mySQL JDBC driver in particular is known to be vulnerable to this class of attack. As a resu...
Description of the security update for SharePoint Foundation 2013: September 13, 2022 (KB5002267)
Description of the security update for SharePoint Foundation 2013: September 13, 2022 KB5002267 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability and Microsoft SharePoint remote code execution vulnerability. To learn more about the...
November 8, 2022—KB5020013 (Security-only update)
None None...
November 8, 2022—KB5020000 (Monthly Rollup)
None None...
Description of the security update for SharePoint Server 2019: September 13, 2022 (KB5002258)
None None...