1154 matches found
BELL-CVE-2022-0158 CVE-2022-0158 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2022-23852 CVE-2022-23852 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2020-28241 CVE-2020-28241 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2020-25712 CVE-2020-25712 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2022-0562 CVE-2022-0562 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2023-28840 CVE-2023-28840 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2018-15908 CVE-2018-15908 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2022-31626 CVE-2022-31626 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2019-18224 CVE-2019-18224 does not affect BellSoft software
Bulletin has no description...
K000135674: HarfBuzz vulnerability CVE-2023-25193
Security Advisory Description hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger On^2 growth via consecutive marks during the process of looking back for base glyphs when attaching marks. CVE-2023-25193 Impact There is no impact; F5 products are not affected by this...
K000135621: VMware Tools vulnerability CVE-2023-20867
Security Advisory Description A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. CVE-2023-20867 Impact There is no impact; F5 products are not affected by this...
BELL-CVE-2023-38325 CVE-2023-38325 does not affect BellSoft software
Bulletin has no description...
CVE-2023-22887
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized file access outside the intended directory structure by manipulating the runid parameter. This vulnerability is considered low since it requires an authenticated user to exploit i...
DEBIAN-CVE-2023-35934
yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for download fragments differs from their parent manifest's host...
BELL-CVE-2023-35001 CVE-2023-35001 does not affect BellSoft software
Bulletin has no description...
SUSE CVE-2023-35784
A double free or use after free could occur after SSLclear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL before 3.6.3 and 3.7.x before 3.7.3. NOTE: OpenSSL is not affected...
Remote Code Execution (RCE)
Overview Affected versions of this package are vulnerable to Remote Code Execution RCE. A vulnerability exists in NuGet where a race condition can lead to a symlink attack. Note: Non-Linux platforms are not affected. Remediation Upgrade NuGet.Protocol to version 5.11.5, 6.0.5, 6.2.4, 6.3.3, 6.4.2...
Security advisory: Qt Network
A recent SSL issue affecting both OpenSSL and Schannel in Qt Network has been reported and has been assigned the CVE id CVE-2023-34410. In some circumstances, system CA certificates list remains unexpectedly active for the authentication of SSL peers. In a case where clients are supposed to be...
K000134818: Python XML RPC vulnerability CVE-2019-16935
Security Advisory Description The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the servertitle field. This occurs in Lib/DocXMLRPCServer. py in Python 2.x, and in Lib/xmlrpc/server. py in Python 3.x. If setservertitle is called with...