2349 matches found
SUSE SLED15: apache-commons-lang3 / apache-commons-lang3-javadoc / bcel / etc (SUSE-SU-SUSE-RU-2024:3971-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-SUSE-RU-2024:3971-1 advisory. xalan-j2 was updated from version 2.7.2 to 2.7.3: - Security issues fixed: CVE-2022-34169: Fixed...
Finding Solutions to Meet PCI DSS v4.0 Requirements 6.4.3 and 11.6.1
...
CVE-2024-43428 Moodle: cache poisoning via injection into storage
To address a cache poisoning risk in Moodle, additional validation for local storage was required...
SUSE CVE-2024-50118
In the Linux kernel, the following vulnerability has been resolved: btrfs: reject ro-rw reconfiguration if there are hard ro requirements BUG Syzbot reports the following crash: BTRFS info device loop0 state MCS: disabling free space tree BTRFS info device loop0 state MCS: clearing compat-ro...
The vulnerability of the /etc/defnodes/S30setnode.sh component of D-Link DSL-6740C router software allows a hacker to increase their privileges.
The vulnerability of the /etc/defnodes/S30setnode.sh component of D-Link DSL-6740C router software is related to the use of weak password requirements. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...
DEBIAN-CVE-2024-50118
In the Linux kernel, the following vulnerability has been resolved: btrfs: reject ro-rw reconfiguration if there are hard ro requirements BUG Syzbot reports the following crash: BTRFS info device loop0 state MCS: disabling free space tree BTRFS info device loop0 state MCS: clearing compat-ro...
CVE-2024-50118 btrfs: reject ro->rw reconfiguration if there are hard ro requirements
In the Linux kernel, the following vulnerability has been resolved: btrfs: reject ro-rw reconfiguration if there are hard ro requirements BUG Syzbot reports the following crash: BTRFS info device loop0 state MCS: disabling free space tree BTRFS info device loop0 state MCS: clearing compat-ro...
CGA-H39V-79WR-W67F
Bulletin has no description...
WS-2022-0364
In ckb in Rust prior to 0.43.3 and 0.100.0, when a transaction contains a dep group with many cells, the resources required to process it are not linear to the transaction size nor spent script cycles...
CVE-2024-51398: Weak Password Requirements
Altai Technologies Ltd Altai X500 Indoor 22 802.11ac Wave 2 AP web Management Weak password leakage in the background may lead to unauthorized access, data theft, and network attacks, seriously threatening network security...
Progress Telerik Report Server <= 10.2.24.709 Multiple Vulnerabilities (September 2024)
The version of Progress Telerik Report Server installed on the remote host is affected by multiple vulnerabilities: - A credential stuffing attack is possible through improper restriction of excessive login attempts. CVE-2024-7292 - A password brute forcing attack is possible through weak passwor...
CVE-2024-48272: Weak Password Requirements
D-Link DSL6740C v6.TR069.20211230 was discovered to use an insecure default Wifi password, possibly allowing attackers to connect to the device via a bruteforce attack...
Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8
Summary Third party reported 'Stored XSS' and 'CSRF' issues, Apache Tomcat, Apache ActiveMQ, CKEditor, libcURL, xmlbeans, scala-library, json-smart, jna-platform, jackson-databind, commons-io, shiro-core, commons-net, snappy-java, xercesImpl are identified as vulnerable components with multiple...
5 Ways to Reduce SaaS Security Risks
As technology adoption has shifted to be employee-led, just in time, and from any location or device, IT and security teams have found themselves contending with an ever-sprawling SaaS attack surface, much of which is often unknown or unmanaged. This greatly increases the risk of identity-based...
Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA - Vulnerabilities addressed in IBM® License Key Server
Summary IBM Engineering Requirements Management DOORS Family is subject to multiple vulnerabilities in IBM License Key Server LKS Administration and Reporting Tool ART and Agent v9.0. Vulnerability Details CVEID:CVE-2022-37734 DESCRIPTION: GraphQL Java is vulnerable to a denial of service, caused...
CVE-2024-7293
In Progress® Telerik® Report Server versions prior to 2024 Q3 10.2.24.806, a password brute forcing attack is possible through weak password requirements...
CVE-2024-7293
In Progress® Telerik® Report Server versions prior to 2024 Q3 10.2.24.806, a password brute forcing attack is possible through weak password requirements...
CVE-2024-7293 Password policy for new users is not strong enough
In Progress® Telerik® Report Server versions prior to 2024 Q3 10.2.24.806, a password brute forcing attack is possible through weak password requirements...
CVE-2024-7293: Weak Password Requirements
In Progress® Telerik® Report Server versions prior to 2024 Q3 10.2.24.806, a password brute forcing attack is possible through weak password requirements...
