31117 matches found
Ubuntu: Security Advisory (USN-5925-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Tenable SecurityCenter 6.0.0 Multiple Vulnerabilities (TNS-2023-07)
According to its self-reported version, the Tenable SecurityCenter application installed on the remote host is running 6.0.0 and is therefore affected by multiple vulnerabilities in OpenSSL prior to version 3.0.8: - An attacker that had observed a genuine connection between a client and a server...
curl: CVE-2023-27535: FTP too eager connection reuse
A vulnerability existed in libcurl FTPS protocol that allowed the reuse of a connection even if different credentials were specified for different connections, resulting in the use of cached credentials for the wrong content. The vulnerability was caused by the failure to refuse caching when...
USN-5919-1 linux-aws-hwe, linux-oracle vulnerabilities
It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execut...
USN-5917-1: Linux kernel vulnerabilities
It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execut...
CVE-2022-45553
An issue discovered in Shenzhen Zhibotong Electronics WBT WE1626 Router v 21.06.18 allows attacker to execute arbitrary commands via serial connection to the UART port...
CVE-2022-45553
An issue discovered in Shenzhen Zhibotong Electronics WBT WE1626 Router v 21.06.18 allows attacker to execute arbitrary commands via serial connection to the UART port...
CVE-2022-46501
Accruent LLC Maintenance Connection 2021 all & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function...
CVE-2022-46501
Accruent LLC Maintenance Connection 2021 all & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function...
Sql injection
Accruent LLC Maintenance Connection 2021 all & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function...
virt-who bug fix and enhancement update
An update is available for virt-who. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The virt-who service collects information about the connection between the...
CVE-2022-46501
Accruent LLC Maintenance Connection 2021 all & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function...
CVE-2022-46501
Accruent LLC Maintenance Connection 2021 all & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function...
Accruent LLC Maintenance Connection SQL注入漏洞
Accruent LLC Maintenance Connection is a comprehensive work order management, preventive maintenance program and parts inventory solution. A security vulnerability exists in Accruent LLC Maintenance Connection versions 2021 and 2022.2, which stems from an SQL injection during emailing to the work...
CVE-2022-46501
CVE-2022-46501 affects Accruent LLC Maintenance Connection 2021 (all) and 2022.2. The vulnerability is a SQL injection in the E-Mail to Work Order function. The NVD entry lists a CVSS v3.1 base score of 9.8 (CRITICAL) with network access, no user interaction, and no privileges required, yielding ...
Undertow: DoS can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations
A flaw was found in Undertow with EJB invocations. This flaw allows an attacker to generate a valid HTTP request and send it to the server on an established connection after removing the LASTCHUNK from the bytes, causing a denial of service...
Ubuntu 20.04 LTS / 22.04 LTS : lighttpd vulnerabilities (USN-5903-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5903-1 advisory. It was discovered that lighttpd incorrectly handled certain inputs, which could result in a stack buffer overflow. A remote attacker could...
SUSE SLES12 Security Update : compat-openssl098 (SUSE-SU-2023:0581-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0581-1 advisory. - CVE-2022-4304: Fixed timing Oracle in RSA Decryption bsc1207534. Tenable has extracted the preceding description block directly from the...
SUSE CVE-2023-26103
Versions of the package deno before 1.31.0 are vulnerable to Regular Expression Denial of Service ReDoS due to the upgradeWebSocket function, which contains regexes in the form of /s,s/, used for splitting the Connection/Upgrade header. A specially crafted Connection/Upgrade header can be used to...