Critical: Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.2.4 security fixes and container updates

Multicluster Engine for Kubernetes 2.2.4 General Availability release images, which fix security issues and update container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detaile...

Important: Red Hat Security Advisory: git security update

An update for git is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

RHEL 8 : git (RHSA-2023:3247)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3247 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a...

RHEL 8 : git (RHSA-2023:3243)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3243 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a...

Mageia: Security Advisory (MGASA-2023-0163)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:2062-1 Security update for git

This update for git fixes the following issues: - CVE-2023-25652: Fixed partial overwrite of paths outside the working tree bsc1210686. - CVE-2023-25815: Fixed malicious placemtn of crafted message bsc1210686. - CVE-2023-29007: Fixed arbitrary configuration injection bsc1210686...

Starting a Career in Tech? Learn How Rapid7’s Emerging Talent Programmes Foster Long-Term Success

Rapid7’s Emerging Talent Programmes pave the way for early career professionals to have a successful career in tech. In Belfast, we offer both an Apprentice Programme and a Placement Programme to support new talent coming into the tech field. The Apprentice Programme is designed for individuals...

PT-2025-41086

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained an incorrect exception table annotation in the clear user rep good function. This could lead to a kernel oops report being generated instead of a proper -EFAUL...

CVE-2023-1427

The Photo Gallery by 10Web WordPress plugin before 1.8.15 did not ensure that uploaded files are kept inside its uploads folder, allowing high privilege users to put images anywhere in the filesystem via a path traversal vector...

CVE-2023-30635

TiKV 6.1.2 allows remote attackers to cause a denial of service fatal error upon an attempt to get a timestamp from the Placement Driver...

CVE-2023-30635

TiKV 6.1.2 allows remote attackers to cause a denial of service fatal error upon an attempt to get a timestamp from the Placement Driver...

CVE-2023-30635

TiKV 6.1.2 allows remote attackers to cause a denial of service fatal error upon an attempt to get a timestamp from the Placement Driver...

CVE-2023-30635: Uncontrolled Resource Consumption

TiKV 6.1.2 allows remote attackers to cause a denial of service fatal error upon an attempt to get a timestamp from the Placement Driver...

TiKV 安全漏洞

TiKV is an open source, distributed and transactional key-value database from TiKV Open Source. A security vulnerability exists in TiKV version 6.1.2, which can be exploited by a remote attacker to obtain a timestamp from the Placement Driver, resulting in a denial of service...

PT-2023-22828

Name of the Vulnerable Software and Affected Versions TiKV version 6.1.2 Description The issue allows remote attackers to cause a denial of service, resulting in a fatal error when attempting to get a timestamp from the Placement Driver. Recommendations For TiKV version 6.1.2, at the moment, ther...

CVE-2023-30635

TiKV 6.1.2 allows remote attackers to cause a denial of service fatal error upon an attempt to get a timestamp from the Placement Driver...

CVE-2023-28433

Minio is a Multi-Cloud Object Storage framework. All users on Windows prior to version RELEASE.2023-03-20T20-16-18Z are impacted. MinIO fails to filter the \ character, which allows for arbitrary object placement across buckets. As a result, a user with low privileges, such as an access key,...

Code injection

Minio is a Multi-Cloud Object Storage framework. All users on Windows prior to version RELEASE.2023-03-20T20-16-18Z are impacted. MinIO fails to filter the \ character, which allows for arbitrary object placement across buckets. As a result, a user with low privileges, such as an access key,...

CVE-2023-28434

CVE-2023-28434 (MinIO) affects MinIO’s object storage framework. A security feature bypass allows an attacker with credentials for arn:aws:s3:::* and Console API access to bypass metadata bucket name checking during PostPolicyBucket and place objects into arbitrary buckets. This can impact confid...

CVE-2023-28433

Minio is a Multi-Cloud Object Storage framework. All users on Windows prior to version RELEASE.2023-03-20T20-16-18Z are impacted. MinIO fails to filter the "" character, which allows for arbitrary object placement across buckets. As a result, a user with low privileges, such as an access key,...