6540 matches found
CVE-2021-3521 affecting package rpm 4.14.2-14
CVE-2021-3521 affecting package rpm 4.14.2-14. A patched version of the package is available...
Design/Logic Flaw
Discourse is an open source discussion platform. In versions prior to 2.8.9 on the stable branch and prior to 2.9.0.beta10 on the beta and tests-passed branches, a moderator can create new and edit existing themes by using the API when they should not be able to do so. The problem is patched in...
DEBIAN-CVE-2022-39236
Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Starting with version 17.1.0-rc.1, improperly formed beacon events can disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the...
UBUNTU-CVE-2022-39236
Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Starting with version 17.1.0-rc.1, improperly formed beacon events can disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the...
GHSA-MRGP-MRHC-5JRQ vm2 vulnerable to Sandbox Escape resulting in Remote Code Execution on host
Impact A threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox. Patches This vulnerability was patched in the release of version 3.9.11 of vm2 Workarounds None. References Github Issue - https://github.com/patriksimek/vm2/issues/467 T...
DEBIAN-CVE-2022-39835
An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct messages that were not sent by them. The attacker needs to be part of the group chat or single chat. The fixed version is 1.5.0...
PT-2022-25487 · Trend Micro · Trend Micro Deep Security +1
Name of the Vulnerable Software and Affected Versions: Trend Micro Deep Security version 20 Cloud One - Workload Security Agent for Windows affected versions not specified Description: A link following issue could allow a local attacker to escalate privileges on affected installations. The attack...
Nextcloud: Vulnerable moment-timezone version shipped
An information exposure vulnerability was found in the moment-timezone package used by Nextcloud server. Attackers could sniff network traffic during data transmission, making exploitation easier. The vulnerability was patched in version 0.5.35 by changing the FTP endpoint with an HTTPS endpoint...
CVE-2022-36123 affecting package kernel 5.10.131.1-1
CVE-2022-36123 affecting package kernel 5.10.131.1-1. A patched version of the package is available...
CVE-2021-3736 affecting package kernel 5.10.131.1-1
CVE-2021-3736 affecting package kernel 5.10.131.1-1. A patched version of the package is available...
CVE-2022-36879 affecting package kernel 5.10.131.1-1
CVE-2022-36879 affecting package kernel 5.10.131.1-1. A patched version of the package is available...
CVE-2021-4135 affecting package kernel 5.10.131.1-1
CVE-2021-4135 affecting package kernel 5.10.131.1-1. A patched version of the package is available...
CVE-2022-2938 affecting package kernel 5.10.131.1-1
CVE-2022-2938 affecting package kernel 5.10.131.1-1. A patched version of the package is available...
CVE-2022-1012 affecting package kernel 5.10.131.1-1
CVE-2022-1012 affecting package kernel 5.10.131.1-1. A patched version of the package is available...
CVE-2022-1651 affecting package kernel 5.10.131.1-1
CVE-2022-1651 affecting package kernel 5.10.131.1-1. A patched version of the package is available...
CVE-2021-3659 affecting package kernel 5.10.131.1-1
CVE-2021-3659 affecting package kernel 5.10.131.1-1. A patched version of the package is available...
CVE-2021-3905 affecting package openvswitch 2.15.7-1
CVE-2021-3905 affecting package openvswitch 2.15.7-1. A patched version of the package is available...
CVE-2021-28861 affecting package python3 3.7.13-2
CVE-2021-28861 affecting package python3 3.7.13-2. A patched version of the package is available...