SUSE CVE-2021-3602

An information disclosure flaw was found in Buildah, when building containers using chroot isolation. Running processes in container builds e.g. Dockerfile RUN commands can access environment variables from parent and grandparent processes. When run in a container in a CI/CD environment,...

SUSE CVE-2021-35525

PostSRSd before 1.11 allows a denial of service subprocess hang if Postfix sends certain long data fields such as multiple concatenated email addresses. NOTE: the PostSRSd maintainer acknowledges "theoretically, this error should never occur ... I'm not sure if there's a reliable way to trigger...

SUSE CVE-2023-0215

The public API function BIOnewNDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications. The function receives a BIO from the...

Known NAS Backup Issues With Nutanix Files Integration

Known Issues Issue 1: Disabling "multi-protocol access" within Nutanix breaks NAS Backup When Nutanix storage has been added to Veeam Backup & Replication using Nutanix Files System integration, if "multi-protocol access" is disabled within the Nutanix configuration, Veeam Backup & Replication wi...

CVE-2023-21568

Microsoft SQL Server Integration Service VS extension Remote Code Execution Vulnerability...

Remote code execution

Microsoft SQL Server Integration Service VS extension Remote Code Execution Vulnerability...

CVE-2023-21568

CVE-2023-21568 affects the Microsoft SQL Server Integration Services Visual Studio extension. The vulnerability stems from improper input validation in the VS extension, enabling a local, user-interactive remote code execution with high impact (C/H/I/H; CVSS v3.1: 7.3). Exploitation details or a ...

CVE-2023-21568 Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability

...

Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability

...

PT-2023-8998 · Microsoft · Sql Server Integration Services

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server Integration Service VS extension affected versions not specified Description: The issue is related to insufficient input validation in the SQL Server Integration Services SSIS software, which can be exploited to execute...

KLA20235 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft SQL Server...

Cross-site scripting in CKEditor5

CKSource CKEditor5 35.4.0 was discovered to contain a cross-site scripting XSS vulnerability via the Full Featured CKEditor5 widget. NOTE: the vendor's position is that this is not a vulnerability. The CKEditor 5 documentation discusses that it is the responsibility of an integrator who is adding...

CVE-2022-48110

CKSource CKEditor 5 35.4.0 was discovered to contain a cross-site scripting XSS vulnerability via the Full Featured CKEditor5 widget. NOTE: the vendor's position is that this is not a vulnerability. The CKEditor 5 documentation discusses that it is the responsibility of an integrator who is addin...

Cross site scripting

CKSource CKEditor 5 35.4.0 was discovered to contain a cross-site scripting XSS vulnerability via the Full Featured CKEditor5 widget. NOTE: the vendor's position is that this is not a vulnerability. The CKEditor 5 documentation discusses that it is the responsibility of an integrator who is addin...

CVE-2023-24572

Dell Command | Integration Suite for System Center, versions before 6.4.0 contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion...

CVE-2023-24572

Dell Command | Integration Suite for System Center, versions before 6.4.0 contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion...

Arbitrary file deletion

Dell Command | Integration Suite for System Center, versions before 6.4.0 contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion...

CVE-2023-24572

Dell Command | Integration Suite for System Center, versions before 6.4.0 contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion...

CVE-2023-24572

CVE-2023-24572 affects Dell Command | Integration Suite for System Center, versions before 6.4.0. It describes an arbitrary folder deletion vulnerability during uninstallation that a locally authenticated malicious user may exploit. The impact is limited to folder deletion; no additional details ...

CVE-2023-24572

Dell Command | Integration Suite for System Center, versions before 6.4.0 contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion...