8584 matches found
CVE-2021-46250
An issue in SOA2Login::commented of ScratchOAuth2 before commit a91879bd58fa83b09283c0708a1864cdf067c64a allows attackers to authenticate as other users on downstream components that rely on ScratchOAuth2...
CVE-2021-46250
An issue in SOA2Login::commented of ScratchOAuth2 before commit a91879bd58fa83b09283c0708a1864cdf067c64a allows attackers to authenticate as other users on downstream components that rely on ScratchOAuth2...
Design/Logic Flaw
An issue in SOA2Login::commented of ScratchOAuth2 before commit a91879bd58fa83b09283c0708a1864cdf067c64a allows attackers to authenticate as other users on downstream components that rely on ScratchOAuth2...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Security Directory Server
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, used by IBM Security Directory Server SDS. A new fix has addressed the issues. Vulnerability Details CVEID: CVE-2021-35578 DESCRIPTION: An unspecified vulnerability in Java SE related to the JSSE component could allo...
Cookie and header exposure in twisted
...
[SECURITY] Fedora 34 Update: phoronix-test-suite-10.8.1-1.fc34
The Phoronix Test Suite is the most comprehensive testing and benchmarking platform available for the Linux operating system. This software is designed to effectively carry out both qualitative and quantitative benchmarks in a clean, reproducible, and easy-to-use manner. The Phoronix Test Suite...
Security Bulletin: Vulnerability in Apache Log4j affects Netcool Operation Insight (CVE-2021-44228)
Summary A vulnerability was identified within the Apache Log4j library that is used by Netcool Operation Insight to provide logging functionality. This vulnerability has been addressed. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache Log4j could allow a remote attacker to execute...
CVE-2021-23820
This affects all versions of package json-pointer. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays...
Microsoft Windows Print Spooler Components权限许可和访问控制问题漏洞
Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components due to privilege permission and access control issues. The following products and editions are affected:Windows 1...
Unable to delete expired certificate with no bindings
The following error is returned when trying to delete a certificate that has no bindings when clicking on "show bindings" "Certificate is referenced by a CRL, OCSP responder, vserver, service, monitor, SSL profile, CA Cert Group, another certificate, or a policy expression using XMLENCRYPT or...
Rockwell (CVE-2017-5176) (deprecated)
This plugin has been deprecated as Rockwell Automation Connected Components Workbench is not supported. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled...
CVE-2021-44899
Micro-Star International MSI Center = 1.0.31.0 is vulnerable to multiple Privilege Escalation vulnerabilities in the atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLibX64.sys, WinRing0.sys, WinRing0x64.sys drivers components. All the vulnerabilities are triggered by sending specific IOC...
[SECURITY] Fedora 34 Update: qt5-qtwebengine-5.15.8-2.fc34
Qt5 - QtWebEngine components...
Micro Star International Center 安全漏洞
Micro Star International Center is a new platform from Micro Star Technology Micro Star Inc. of Taiwan, China that combines all of MSI's exclusive features. Micro Star International Center has a security vulnerability that originates from an elevation of privilege vulnerability in multiple...
Micro Star MSI True Color 安全漏洞
Micro Star MSI True Color is a color calibration application from Micro Star Technology Micro Star Inc. of Taiwan, China. A security vulnerability exists in Micro Star MSI True Color that stems from an elevation of privilege LPE/EoP vulnerability in multiple components of the driver. All...
Micro Star International Center 安全漏洞
Micro Star International Center is a new platform from Micro Star Technology Micro Star Inc. of Taiwan, China that combines all of MSI's exclusive features. Micro Star International Center has a security vulnerability that originates from an elevation of privilege LPE/EoP vulnerability in multipl...
Supply Chain Security Is Not a Problem…It’s a Predicament
In the late 19th century, many large cities faced an unpleasant predicament due to too much horse manure piling up in the streets. Aside from the direct impact of the odors and unsightly excrement, it indirectly poisoned the water supply and accelerated the spread of disease. There were some ways...
CVE-2022-23601
CVE-2022-23601 affects the Symfony form component (FrameworkBundle) where CSRF protection was not enabled by default after a configuration-loading change. This made applications vulnerable to CSRF attacks when the default was not explicitly enabled. The issue is resolved in patch versions; users ...
