10331 matches found
SCALANCE W1788-1 M12 Industrial Switch DoS
The vulnerability of the microprogrammed software of industrial switches SCALANCE W1788-1 M12, SCALANCE W1788-2 EEC M12, SCALANCE W1788-2 M12, and SCALANCE W1788-2IA M12 is related to errors in processing ARP packets. Exploiting this vulnerability can allow a remote attacker to cause service...
2022-07 Cumulative Update for Windows 11 for x64-based Systems (KB5015814)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
Code injection in Apache Commons Configuration
Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.configuration2.interpol.Lookup that performs the...
Gallagher Controller 6000 security vulnerabilities
The Gallagher Controller 6000 is an interface between the Gallagher Command Center server and distributed field hardware from Gallagher New Zealand. A security vulnerability exists in the Gallagher Controller 6000 that originates from an attack via conflicting ARP packets with duplicate IP...
kernel security and bug fix update
4.18.0-372.13.1.0.16.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32...
SIMATIC CP 442-1 RNA Uncontrolled Resource Consumption
The vulnerability of the microprogramming software for the SIMATIC CP 442-1 RNA and SIMATIC CP 443-1 RNA communication modules is related to an uncontrolled consumption of resources during the processing of ARP requests. Exploiting this vulnerability can allow attackers to execute an “ARP storm”...
gnome-control-center bug fix and enhancement update
An update is available for gnome-control-center. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnome-control-center package contains configuration utilitie...
debtresolution.com.my Cross Site Scripting vulnerability OBB-2668787
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
HPESBST04311 rev.1 - HPE StoreOnce Software, SSH Server Supports Weak Key Exchange Algorithms
Potential Security Impact: Remote: Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreOnce 3640 - Prior to 4.3.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-28622 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N | 3.7 |...
Security update for firejail (important)
openSUSE Security Update: Security update for firejail Announcement ID: openSUSE-SU-2022:10016-1 Rating: important References: 1199148 Cross-References: CVE-2022-31214 CVSS scores: CVE-2022-31214 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-S...
Security Bulletin: Potential module resolution error in DataPower Operator
Summary IBM has addressed a potential build-time issue. This did not affect product code, but may have been detected in customer scans. Vulnerability Details CVEID:CVE-2022-23773 DESCRIPTION: An unspecified error with not treating branches with semantic-version names as releases in cmd/go in Gola...
OS Command Injection
Apache NiFi and Apache NiFi Registry are vulnerable to os command injection. The vulnerability exists because the ShellUserGroupProvider doesn't properly neutralizes group resolution command elements which allows an attacker to inject and execute arbitrary OS commands on Linux and MacOS platforms...
CVE-2022-31219: Improper Link Resolution Before File Access
Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation o...
CVE-2022-31216: Improper Link Resolution Before File Access
Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation o...
CVE-2022-31217: Improper Link Resolution Before File Access
Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation o...
PT-2025-26024
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash in the Linux kernel has been resolved, related to the scsi: qla2xxx module. The issue occurs due to stale SRB access around I/O timeouts. To fix this, the code now ensures that t...
2022-06 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5014699)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2022-06 Cumulative Update for Windows 11 for x64-based Systems (KB5014697)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
CVE-2021-41641: Improper Link Resolution Before File Access
Deno =1.14.0 file sandbox does not handle symbolic links correctly. When running Deno with specific write access, the Deno.symlink method can be used to gain access to any directory...
