UBUNTU-CVE-2022-22759

If a document created a sandboxed iframe without allow-scripts, and subsequently appended an element to the iframe's document that e.g. had a JavaScript event handler - the event handler would have run despite the iframe's sandbox. This vulnerability affects Firefox 97, Thunderbird 91.6, and...

UBUNTU-CVE-2022-22757

Remote Agent, used in WebDriver, did not validate the Host or Origin headers. This could have allowed websites to connect back locally to the user's browser to control it. This bug only affected Firefox when WebDriver was enabled, which is not the default configuration.. This vulnerability affect...

[SECURITY] Fedora 34 Update: rust-below-0.4.1-3.fc34

below is an interactive tool to view and record historical system data. It has support for: - information regarding hardware resource utilization - viewing the cgroup hierarchy - cgroup and process information - pressure stall information PSI - record mode to record system data - replay mode to...

Fedora: Security Advisory for rust-below (FEDORA-2022-7ec8bda833)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

AZL-8462 CVE-2022-0443 affecting package vim for versions less than 8.2.4743-1

Use After Free in GitHub repository vim/vim prior to 8.2...

AZL-8411 CVE-2021-46667 affecting package mariadb for versions less than 10.6.7-1

MariaDB before 10.6.5 has a sqllex.cc integer overflow, leading to an application crash...

AZL-8410 CVE-2021-46666 affecting package mariadb for versions less than 10.6.7-1

MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause...

AZL-8406 CVE-2021-46662 affecting package mariadb for versions less than 10.6.7-1

MariaDB through 10.5.9 allows a setvar.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery...

AZL-8405 CVE-2021-46661 affecting package mariadb for versions less than 10.6.7-1

MariaDB through 10.5.9 allows an application crash in findfieldintables and findorderinlist via an unused common table expression CTE...

AZL-8458 CVE-2022-0407 affecting package vim for versions less than 8.2.4233-1

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

PYSEC-2022-23

Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...

Fedora: Security Advisory for rust-below (FEDORA-2022-c4071e3dc7)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

AZL-8363 CVE-2022-0361 affecting package vim for versions less than 8.2.4233-1

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

CVE-2022-23120

A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to escalate privileges and run arbitrary code in the context of root. Please note: an attacker must first obtain access to the target agent in...

CVE-2022-0285

Cross-site Scripting XSS - Stored in Packagist pimcore/pimcore prior to 10.2.9...

AZL-7723 CVE-2022-21333 affecting package mysql for versions less than 8.0.28-1

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...

AZL-7541 CVE-2022-21285 affecting package mysql for versions less than 8.0.28-1

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...

M-Files Web 和 M-Files Server 安全漏洞

M-Files Corporation M-Files Web is an intelligent information management platform from M-Files Corporation, USA. M-Files Server is a server for the M-Files system from M-Files Corporation. A security vulnerability exists in the M-Files Server and M-Files Web products versions lower than...

AZL-7486 CVE-2022-23218 affecting package glibc for versions less than 2.35-1

The deprecated compatibility function svcunixcreate in the sunrpc module of the GNU C Library aka glibc through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or if an application is not...

UBUNTU-CVE-2022-22739

Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...