1154 matches found
K000138511: Linux kernel vulnerability CVE-2023-38427
Security Advisory Description An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemblenegcontexts. CVE-2023-38427 Impact There is no impact; F5 products are not affected by this vulnerability. Security...
K000138508: mod_ssl vulnerability CVE-2004-0700
Security Advisory Description Format string vulnerability in the modproxy hook functions function in sslenginelog.c in modssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are...
BELL-CVE-2010-4756 CVE-2010-4756 does not affect BellSoft software
Bulletin has no description...
AZL-44811 CVE-2023-6992 affecting package clucene 2.3.3.4-40
Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation deflate.c. The issues resulted from improper input validation and heap-based buffer overflow. A local attacker could exploit the problem during compression...
AZL-45198 CVE-2023-6992 affecting package teckit for versions less than 2.5.12-4
Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation deflate.c. The issues resulted from improper input validation and heap-based buffer overflow. A local attacker could exploit the problem during compression...
BELL-CVE-2023-7090 CVE-2023-7090 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2023-50431 CVE-2023-50431 does not affect BellSoft software
Bulletin has no description...
CVE-2023-22522
This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject unsafe user input into a Confluence page. Using this approach, an attacker is able to achieve Remote Code Execution RCE on an affected instance. Publicly accessible Confluence Da...
CVE-2023-5625
A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products...
CVE-2023-4606
An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command. This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected...
BELL-CVE-2023-30772 CVE-2023-30772 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2023-2829 CVE-2023-2829 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2023-22997 CVE-2023-22997 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2023-22996 CVE-2023-22996 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2023-4133 CVE-2023-4133 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2023-45863 CVE-2023-45863 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2023-39194 CVE-2023-39194 does not affect BellSoft software
Bulletin has no description...
Heap buffer overflow in libwebp (CVE-2023-4863)
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Products Confirmed Not Affected No Brocade Fibre Channel products from Broadcom are known to be affected by this...