12581 matches found
MGASA-2022-0268 Updated chromium-browser-stable packages fix security vulnerability
The chromium-browser-stable package has been updated to version 103.0.5060.134 branch, fixing many bugs and 11 CVE. Some of them are listed below. Use after free in Guest View. CVE-2022-2477 Use after free in PDF. CVE-2022-2478 Insufficient validation of untrusted input in File. CVE-2022-2479 Use...
PT-2022-15915 · Sonicwall · Sonicwall Hosted Email Security
Name of the Vulnerable Software and Affected Versions: SonicWall Hosted Email Security versions prior to 10.0.17.7319 Description: The issue is related to an improperly implemented security check in the SonicWall Hosted Email Security, which allows for the bypass of the Capture ATP security servi...
PT-2022-23754 · Jetbrains · Intellij Idea
Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2022.2 Description: The issue allows for local code execution via a Vagrant executable. Recommendations: For versions prior to 2022.2, update to version 2022.2 or later to resolve the issue...
JVN#57073973: "JustSystems JUST Online Update for J-License" starts a program with an unquoted file path
"JustSystems JUST Online Update for J-License" is bundled with multiple products for corporate users provided by JustSystems Corporation, as in Ichitaro through Pro5 and others, and it is registered as a Windows service. "JustSystems JUST Online Update for J-License" starts another program with a...
PT-2022-23743 · Veritas · Netbackup
Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions 8.1.x through 8.1.2 Veritas NetBackup version 8.2 Veritas NetBackup versions 8.3.x through 8.3.0.2 Veritas NetBackup versions 9.x through 9.0.0.1 Veritas NetBackup versions 9.1.x through 9.1.0.1 Description: An issu...
PT-2022-23738 · Veritas · Veritas Netbackup
Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions 8.1.x through 8.1.2 Veritas NetBackup version 8.2 Veritas NetBackup versions 8.3.x through 8.3.0.2 Veritas NetBackup versions 9.x through 9.0.0.1 Veritas NetBackup versions 9.1.x through 9.1.0.1 Description: An issu...
SUSE-SU-2022:2567-1 Important update for SUSE Manager 4.2.8 Release Notes
This update for SUSE Manager 4.2.8 Release Notes provides the following additions: Release notes for SUSE Manager: - Update to 4.2.8 Notification about SUSE Manager end-of-life has been added CVEs fixed CVE-2022-31248 Bugs mentioned bsc1179962, bsc1182742, bsc1189501, bsc1192850, bsc1193032...
Vulnerability fixed in Xen
A vulnerability has been fixed in Xen. The vulnerability allows a malicious party to cause a denial-of-service. Within Shadow Mode, a TLB flush is performed incorrectly potentially causing the host system to run out of memory memory. Only x86 PV guest systems can trigger this vulnerability trigge...
PT-2022-23697 · Veritas · Veritas Netbackup Opscenter
Name of the Vulnerable Software and Affected Versions: Veritas NetBackup OpsCenter versions 8.x through 8.3.0.2 Veritas NetBackup OpsCenter versions 9.x through 9.0.0.1 Veritas NetBackup OpsCenter versions 9.1.x through 9.1.0.1 Veritas NetBackup OpsCenter version 10 Description: An unauthenticate...
PT-2022-16675 · Open Xchange · Ox App Suite
Name of the Vulnerable Software and Affected Versions: OX App Suite versions 7.10.6 and earlier Description: The issue allows OS Command Injection via a serialized Java class to the "Documentconverter API" endpoint. This enables potential attackers to execute system commands. No information is...
PT-2022-15844 · Open Xchange · Ox App Suite
Name of the Vulnerable Software and Affected Versions: OX App Suite versions 7.10.6 and earlier Description: The issue allows for cross-site scripting XSS attacks via the appHandler in a deep link within an e-mail message. This can potentially lead to malicious script execution on the client-side...
PT-2022-23696 · Veritas · Veritas Netbackup Opscenter
Name of the Vulnerable Software and Affected Versions: Veritas NetBackup OpsCenter versions 8.x through 8.3.0.2 Veritas NetBackup OpsCenter versions 9.x through 9.0.0.1 Veritas NetBackup OpsCenter versions 9.1.x through 9.1.0.1 Veritas NetBackup OpsCenter version 10 Description: An issue in Verit...
DSA-5193-1 firefox-esr - security update
Bulletin has no description...
PT-2022-17334 · Hestiacp · Hestiacp
Name of the Vulnerable Software and Affected Versions: hestiacp/hestiacp versions prior to 1.6.5 Description: The issue is an OS Command Injection in the GitHub repository hestiacp/hestiacp. Recommendations: For versions prior to 1.6.5, update to version 1.6.5 or later to resolve the issue...
PT-2022-23356 · Zoho · Zoho Manageengine Supportcenter Plus
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine SupportCenter Plus versions prior to 11023 Description: The issue concerns authentication bypass in V3 API requests. This means an API request can be executed with the credentials of a user who authenticated in the past...
PT-2022-14948 · Openkm · Openkm Community Edition
Name of the Vulnerable Software and Affected Versions: OpenKM Community Edition versions 6.3.10 and earlier Description: The issue allows an attacker to perform an XML external entity injection attack due to the use of the XMLReader parser in the XMLTextExtractor.java file without the required...
PT-2022-23371 · Atos · Atos Unify Openscape Branch +1
Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape SBC versions 9 through 10 before 10R2.2.1 Atos Unify OpenScape Branch versions 9 through 10 before 10R2.1.1 Atos Unify OpenScape BCF version 10 before 10R9.12.1 Description: A remote code execution issue may allow an...
PT-2022-8895 · Unknown · Conf-Cfg-Ini
Name of the Vulnerable Software and Affected Versions: conf-cfg-ini versions prior to 1.2.2 Description: The issue arises when an attacker submits a malicious INI file to an application that parses it with decode, resulting in prototype pollution on the application. This can be exploited further...
PT-2022-23357 · Scooter · Beyond Compare
Name of the Vulnerable Software and Affected Versions: Scooter Beyond Compare versions 4.2.0 through 4.4.2 Description: The issue is an elevation of privilege breakout vulnerability in the Windows EXE installer. It allows a logged-in user to run applications with elevated privileges via the...