9836 matches found
CentOS 8 : postgresql-jdbc (CESA-2023:2867)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:2867 advisory. - pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either PreparedStatement.setTextint, InputStream or...
CVE-2023-0644
Removed by vendor...
Gitlab -- Multiple Vulnerabilities
Gitlab reports: Malicious Runner Attachment via GraphQL...
SUSE CVE-2023-21937
unknown...
SUSE CVE-2023-21939
unknown...
SUSE CVE-2023-21991
unknown...
SUSE CVE-2023-22000
unknown...
CVE-2020-27545
libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object...
CVE-2023-28997
The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.6.5, a malicious server administrator can recover and modify the contents of end-to-end encrypted files. Users should upgrade the Nextcloud Desktop client to 3.6.5...
Upgrade Postgres for CVE-2022-41946
h3. Issue Summary The version of Postgresql bundled in Bitbucket is affected by CVE-2022-41946|https://nvd.nist.gov/vuln/detail/CVE-2022-41946 as described below: quote pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either...
GHSA-Q6G2-G7F3-RR83 vulnerabilities
Vulnerabilities for packages: druid...
CVE-2023-1436 vulnerabilities
Vulnerabilities for packages: druid...
SUSE CVE-2022-22075
Information Disclosure in Graphics during GPU context switch...
CVE-2022-3857
Removed by vendor...
php: PDO:: quote() may return unquoted string due to an integer overflow
A flaw was found in PHP. This issue occurs due to an uncaught integer overflow in PDO::quote of PDOSQLite returning an improperly quoted string. With the implementation of sqlite3snprintf, it is possible to force the function to return a single apostrophe if the function is called on user-supplie...
Sudo 资源管理错误漏洞
Sudo is a program used on Unix-like systems that allows users to execute commands with special privileges in a secure manner. A security vulnerability exists in versions prior to Sudo 1.9.13p2, which stems from the presence of a double release vulnerability...
K32957101: Apache HTTPD vulnerability CVE-2019-0211
Security Advisory Description In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads including scripts executed by an in-process scripting interpreter could execute arbitrary code with the privileges of...
CVE-2022-36289
Protection mechanism failure in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable denial of service via local access...