1111 matches found
SUSE CVE-2021-29428
In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreatin...
SUSE CVE-2022-26381
An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially exploitable crash. This vulnerability affects Firefox 98, Firefox ESR 91.7, and Thunderbird 91.7...
SA44101 - 2019-04: Out-of-Cycle Advisory: Multiple vulnerabilities resolved in Pulse Connect Secure / Pulse Policy Secure 9.0RX
Edit: 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. Multiple vulnerabilities were discovered and have been resolved in Pulse Connect Secure PCS and Pulse Policy Secure PPS. This includes an authentication by-pass vulnerability that can...
Impact of Sudo Vulnerability CVE-2023-22809
The Palo Alto Networks Product Security Assurance team has evaluated the sudo software vulnerability CVE-2023-22809 and has determined that the following Palo Alto Networks products do not expose the sudo program and, therefore, do not offer any scenarios required for successful exploitation of...
CVE-2022-47767
A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to the attacker. This affects Solar-Log devices that use firmware version v4.2.7 up to v5.1.1 included. This does not exist in SL 200, 500, 1000 / fixed in 4.2.8 for SL 250, 300,...
CVE-2023-22414
A Missing Release of Memory after Effective Lifetime vulnerability in Flexible PIC Concentrator FPC of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker from the same shared physical or logical network, to cause a heap memory leak and leading to FPC crash. On all Junos PTX...
CVE-2022-4743
A potential memory leak issue was discovered in SDL2 in GLESCreateTexture function in SDLrendergles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected...
CVE-2022-48197
Reflected cross-site scripting XSS exists in Sandbox examples in the YUI2 repository. The download distributions, TreeView component and the YUI Javascript library overall are not affected. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2022-48197
Reflected cross-site scripting XSS exists in Sandbox examples in the YUI2 repository. The download distributions, TreeView component and the YUI Javascript library overall are not affected. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
UBUNTU-CVE-2022-48197
Reflected cross-site scripting XSS exists in Sandbox examples in the YUI2 repository. The download distributions, TreeView component and the YUI Javascript library overall are not affected. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
PT-2023-15613 · Yui2 · Yui2
Name of the Vulnerable Software and Affected Versions: YUI2 affected versions not specified Description: Reflected cross-site scripting XSS exists in Sandbox examples in the YUI2 repository. The download distributions, TreeView component, and the YUI Javascript library overall are not affected...
K000130411: Samba vulnerabilities CVE-2022-37966 and CVE-2022-37967
Security Advisory Description CVE-2022-37966 Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability. CVE-2022-37967 Windows Kerberos Elevation of Privilege Vulnerability. Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product...
BELL-CVE-2022-4662 CVE-2022-4662 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2022-3643 CVE-2022-3643 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2022-4269 CVE-2022-4269 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2022-45886 CVE-2022-45886 does not affect BellSoft software
Bulletin has no description...
OpenSSL 3.0.7 security fix: Should Opera users be worried?
Security OpenSSL 3.0.7 security fix: Should Opera users be worried? Share November 3rd, 2022 Hi everyone! The OpenSSL 3.0.7 security-fix release fixes high-priority vulnerabilities in the OpenSSL open-source cryptography library, specifically CVE-2022-3602 and CVE-2022-3786. The vulnerabilities...
Security Advisory 0081
Security Advisory 0081 PDF Date: November 1, 2022 Revision | Date | Changes ---|---|--- 1.0 | Nov 1, 2022 | Initial release Description Arista Networks is providing this security update in response to the following related security vulnerabilities: CVE-2022-3602 - An attacker can craft a maliciou...
Security Notice: NVIDIA Response to OpenSSL Vulnerabilities - November 2022
This notice is a response to the OpenSSL vulnerabilities detailed in CVE‑2022‑3786 and CVE‑2022‑3602. Go to NVIDIA Product Security. Update November 30, 2022: NVIDIA can confirm that none of its products are affected by these vulnerabilities. November 1, 2022: NVIDIA is aware of these...