JSA10361 - Pulse Connect Secure (PCS) ActiveX client vulnerability

Last Modified Date Aug 24, 2026 12:35:33 AM...

SA40212 - [Pulse Secure] Sign in page disclosure issue (CVE-2016-4792)

Last Modified Date Aug 24, 2026 12:35:14 AM...

SA44588 - 2020-09: Out-of-Cycle Advisory: Multiple vulnerabilities resolved in Pulse Connect Secure / Pulse Policy Secure 9.1R8.2

Edit: 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. This advisory provides information about multiple vulnerabilities resolved in Pulse Connect Secure 9.1R8.2, Pulse Policy Secure 9.1R8.2 Refer to KB43892 - What releases will Pulse Secur...

CVE-2023-25160 IDOR Vulnerability in Nextcloud Mail

Nextcloud Mail is an email app for the Nextcloud home server platform. Prior to versions 2.2.1, 1.14.5, 1.12.9, and 1.11.8, an attacker can access the mail box by ID getting the subjects and the first characters of the emails. Users should upgrade to Mail 2.2.1 for Nextcloud 25, Mail 1.14.5 for...

GHSA-P6XQ-9H8R-V544 CodenameOne Pending Intent vulnerability

A vulnerability was found in CodenameOne 7.0.70. The manipulation leads to use of implicit intent for sensitive communication. It is possible to launch the attack remotely. Upgrading to version 7.0.71 is able to address this issue. The name of the patch is dad49c9ef26a598619fc48d2697151a02987d478...

CVE-2023-22792

A regular expression based DoS vulnerability in Action Dispatch 6.0.6.1, 6.1.7.1, and 7.0.4.1. Specially crafted cookies, in combination with a specially crafted XFORWARDEDHOST header can cause the regular expression engine to enter a state of catastrophic backtracking. This can cause the process...

CVE-2023-24977 Apache InLong: Jdbc Connection causes arbitrary file reading in InLong

Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick https://github.com/apache/inlong/pull/7214...

PT-2023-19850 · Apache · Apache Inlong

Name of the Vulnerable Software and Affected Versions: Apache InLong versions 1.1.0 through 1.5.0 Description: The issue is an Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong. Users are advised to upgrade to Apache InLong's latest version or cherry-pick a specific pat...

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Apache Tomcat

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of Apache Tomcat. Vulnerability Details CVEID:CVE-2022-42252 DESCRIPTION: Apache Tomcat is vulnerable to HTTP request smuggling, caused by the failure to reject a request containing an invalid...

CVE-2023-0266

A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRVCTLIOCTLELEMREAD|WRITE32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past...

CVE-2023-0240 Use after free in io_uring in the Linux Kernel

There is a logic error in iouring's implementation which can be used to trigger a use-after-free vulnerability leading to privilege escalation. In the ioprepasyncwork function the assumption that the last iograbidentity call cannot return false is not true, and in this case the function will use...

GSD-2023-1001480 bpf: Fix slot type check in check_stack_write_var_off

bpf: Fix slot type check in checkstackwritevaroff This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

RLSA-2023:0050 Moderate: nodejs:14 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs 14.21.1, nodejs-nodemon 2.0.20. Security Fixes: minimist: prototype pollution...

GHSA-CP2P-6XH4-JMCP nterchange Code Injection vulnerability

A vulnerability was found in nterchange up to 4.1.0. It has been rated as critical. This issue affects the function getContent of the file app/controllers/codecallercontroller.php. The manipulation of the argument q with the input %5C%27%29;phpinfo%28%29;/ leads to code injection. The exploit has...

CVE-2021-4283

A vulnerability was found in FreeBPX voicemail. It has been rated as problematic. Affected by this issue is some unknown functionality of the file views/ssettings.php of the component Settings Handler. The manipulation of the argument key leads to cross site scripting. The attack may be launched...

PT-2022-11600 · Unknown · Kapetan Dns

Name of the Vulnerable Software and Affected Versions: kapetan dns versions up to 6.1.0 Description: A vulnerability was found in the DNS/Protocol/Request.cs file, leading to insufficient entropy in prng. The attack may be launched remotely. The issue is rated as problematic. Recommendations: For...

PT-2022-27997 · Apache · Apache Zeppelin

Name of the Vulnerable Software and Affected Versions: Apache Zeppelin versions prior to 0.8.2 Description: An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue allows logged-in users to execute arbitrary javascript in other users' browsers. Recommendations:...

DSA-5301-1 firefox-esr - security update

Bulletin has no description...

Storefront Console crashes when clicking configuration at node Manage Receiver for Web sites

Storefront Console crashes when clicking configuration at node Manage Receiver for Web sites.The Store Front has successfully upgraded from 7.15 to 2203 LTSR...

CVE-2022-44638 affecting package pixman for versions less than 0.42.2-1

CVE-2022-44638 affecting package pixman for versions less than 0.42.2-1. An upgraded version of the package is available that resolves this issue...