917 matches found
CVE-2022-21256 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2021-23568
The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...
Security Bulletin: IBM Event Streams UI affected by multiple node package vulnerabilities
Summary IBM Event Streams UI affected by multiple node package vulnerabilities Vulnerability Details CVEID: CVE-2021-22940 DESCRIPTION: Node.js could allow a remote attacker to bypass security restrictions, caused by an incomplete fix for CVE-2021-22930 related to a use-after-free on close http2 ...
EulerOS 2.0 SP9 : golang (EulerOS-SA-2021-2685)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value...
RHEL 8 : compat-exiv2-026 (RHSA-2021:4319)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:4319 advisory. Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support...
CVE-2021-35636 vulnerabilities
Vulnerabilities for packages: mysql...
Oracle Linux 8 : nodejs:12 (ELSA-2021-3623)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-3623 advisory. - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939, CVE-2021-22940, - CVE-2021-23343, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672 - Resolves...
RHEL 7 : microcode_ctl (RHSA-2021:3322)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3322 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: Vector Register Data Sampling CVE-2020-0548 hw: L1D Cache...
EulerOS 2.0 SP9 : unbound (EulerOS-SA-2021-2259)
According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Unbound before 1.9.5 allows configuration injection in createunboundadservers.sh upon a successful man-in-the-middle attack against a cleartext...
CVE-2021-2339 vulnerabilities
Vulnerabilities for packages: mysql...
EulerOS Virtualization 3.0.2.2 : bluez (EulerOS-SA-2021-2129)
According to the versions of the bluez package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In BlueZ 5.42, a use-after-free was identified in 'confopt' function in 'tools/parser/l2cap.c' source file. This issue can be...
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2021-9307)
The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9307 advisory. - sctp: delay autoasconf init until binding the first addr Xin Long Orabug: 32907967 CVE-2021-23133 - dm ioctl: fix out of bounds array access when...
SUSE SLES11 Security Update : tar (SUSE-SU-2019:14215-1)
The remote SUSE Linux SLES11 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2019:14215-1 advisory. - GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of...
SUSE: Security Advisory (SUSE-SU-2018:0880-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 8 : rust-toolset:ol8 (ELSA-2021-1935)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1935 advisory. rust 1.49.0-1 - Update to 1.49.0. 1.48.0-1 - Update to 1.48.0. rust-toolset 1.49.0-1 - Update to Rust and Cargo 1.49.0. 1.48.0-1 - Update to Rust and...
GHSA-36XW-FX78-C5R4 vulnerabilities
Vulnerabilities for packages: ctop...
EulerOS 2.0 SP3 : nasm (EulerOS-SA-2021-1820)
According to the versions of the nasm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption crashed of nasm when handling a crafted file due to...
CVE-2021-2299 vulnerabilities
Vulnerabilities for packages: mysql...