31094 matches found
Tree connection race condition remote code execution vulnerability
...
Information Disclosure
Jenkins Active Directory Plugin is vulnerable to Information Disclosure. The vulnerability exists when it ignores the "Require TLS" and "StartTls" options and performs connection test without unencrypted which allows an attacker to gain access to sensitive information in the system...
CVE-2023-38434
xHTTP 72f812d has a double free in closeconnection in xhttp.c via a malformed HTTP request method...
DEBIAN-CVE-2023-38429
An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/connection.c in ksmbd has an off-by-one error in memory allocation because of ksmbdsmb2checkmessage that may lead to out-of-bounds access...
PT-2023-4726 · Plk-100 · Plk-100
Name of the Vulnerable Software and Affected Versions: PLK-100 affected versions not specified Description: The issue is related to errors in TCP connection processing. It may allow a remote attacker to cause a denial of service. Recommendations: At the moment, there is no information about a new...
Postgraas SQL注入漏洞
Blue Yonder GmbH Postgraas is a super-simple PostgreSQL-as-a-service from Blue Yonder GmbH, China. A SQL injection vulnerability exists in Blue Yonder postgraasserver 2.0.0b2 and earlier versions, which originates from the function in the file...
Code injection
Mattermost iOS app fails to properly validate the server certificate while initializing the TLS connection allowing a network attacker to intercept the WebSockets connection...
CVE-2023-3615 Lack of server certificate validation in websockets connection
Mattermost iOS app fails to properly validate the server certificate while initializing the TLS connection allowing a network attacker to intercept the WebSockets connection...
CVE-2023-3615 Lack of server certificate validation in websockets connection
Mattermost iOS app fails to properly validate the server certificate while initializing the TLS connection allowing a network attacker to intercept the WebSockets connection...
Oracle Linux 8 : firefox (ELSA-2023-4076)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-4076 advisory. 102.13.0-2.0.1 - Updated homepages to use https Orabug: 34648274 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the...
CVE-2023-38431
An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd does not validate the relationship between the NetBIOS header's length field and the SMB header sizes, via pdusize in ksmbdconnhandlerloop, leading to an out-of-bounds read...
PT-2023-25456 · Mattermost · Mattermost Ios App
Name of the Vulnerable Software and Affected Versions: Mattermost iOS app affected versions not specified Description: The Mattermost iOS app fails to properly validate the server certificate while initializing the TLS connection, allowing a network attacker to intercept the WebSockets connection...
Oracle Linux 8 : thunderbird (ELSA-2023-4063)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-4063 advisory. 102.13.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 102.13.0-2 - Update to 102.13.0 build2 102.13.0-...
Apache Airflow Information Disclosure Vulnerability (CNVD-2023-67075)
Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An information disclosure vulnerability exists in Apache Airflow versions prior to...
Juniper Networks Junos OS MX 安全漏洞
Juniper Networks Junos OS MX is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS MX has a security vulnerability that originates from improper input validation ...
AlmaLinux 8 : thunderbird (ALSA-2023:4063)
The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2023:4063 advisory. - An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox 115, Firefo...
CVE-2023-30565
An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker...
Design/Logic Flaw
An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker...