1453 matches found
DEBIAN-CVE-2022-2447
A flaw was found in Keystone. There is a time lag up to one hour in a default configuration between when security policy says a token should be revoked from when it is actually revoked. This could allow a remote administrator to secretly maintain access for longer than expected...
CVE-2022-2447
A flaw was found in Keystone. There is a time lag up to one hour in a default configuration between when security policy says a token should be revoked from when it is actually revoked. This could allow a remote administrator to secretly maintain access for longer than expected...
CVE-2022-2447
A flaw was found in Keystone. There is a time lag up to one hour in a default configuration between when security policy says a token should be revoked from when it is actually revoked. This could allow a remote administrator to secretly maintain access for longer than expected...
UBUNTU-CVE-2022-2447
A flaw was found in Keystone. There is a time lag up to one hour in a default configuration between when security policy says a token should be revoked from when it is actually revoked. This could allow a remote administrator to secretly maintain access for longer than expected...
PT-2022-16707
Name of the Vulnerable Software and Affected Versions Keystone affected versions not specified Description A flaw was found in Keystone, where there is a time lag of up to one hour in the default configuration between when the security policy says a token should be revoked and when it is actually...
Foxit PDF Reader delay Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the delay method...
Google delays Chrome third party cookie sunsetting…again
Weve seen many examples of third-party cookies being tackled by browsers recently. Its not so long ago that Firefox effectively locked down third-party tracking by isolating cookies into so-called jars. By doing so, their "Total Cookie Protection" seeks to prevent all those cookies on your PC...
PT-2022-23961 · Foxit · Foxit Pdf Reader
Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 11.2.1.53537 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. Th...
GSD-2022-1003133 x86/delay: Fix the wrong asm constraint in delay_loop()
x86/delay: Fix the wrong asm constraint in delayloop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...
Delay in launching Published Desktops for on-demand provisioned MCS VMs on Azure
It takes approximately 1 hour to be fully registered. Once the session launch is initiated, it takes between 5 and 10 minutes to start the VDA. In the boot diagnostics section, the VDA seems stuck at "Applying Computer Settings" as below:...
LibDiamond.diamondCut() should check diamondStorage().acceptanceTimes[keccak256(abi.encode(_diamondCut))] != 0
Lines of code Vulnerability details Impact Normally, diamondStorage.acceptanceTimeskeccak256abi.encodediamondCut will be set in LibDiamond.proposeDiamondCut. Then in LibDiamond.diamondCut, it checks that diamondStorage.acceptanceTimeskeccak256abi.encodediamondCut function proposeDiamondCut...
Incorrect check in diamondCut allows update be executed without proposal
Lines of code Vulnerability details The current implementation of LibDiamond.diamondCut allows any diamondCut update to be executed instantly, defeating the purpose of the 7 day update delay mechanism. The issue is this check in LibDiamond.diamondCut: require...
CVE-2022-1570
The Files Download Delay WordPress plugin before 1.0.7 does not have authorisation and CSRF checks when reseting its settings, which could allow any authenticated users, such as subscriber to perform such action...
CVE-2022-1570
The Files Download Delay WordPress plugin before 1.0.7 does not have authorisation and CSRF checks when reseting its settings, which could allow any authenticated users, such as subscriber to perform such action...
Cross site request forgery (csrf)
The Files Download Delay WordPress plugin before 1.0.7 does not have authorisation and CSRF checks when reseting its settings, which could allow any authenticated users, such as subscriber to perform such action...
WordPress plugin Files Download Delay 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Files Download Delay plugin versions prior to 1.0.7 are vulnerable to cross-site request...
CVE-2022-1570 Files Download Delay < 1.0.7 - Subscriber+ Settings Reset
The Files Download Delay WordPress plugin before 1.0.7 does not have authorisation and CSRF checks when reseting its settings, which could allow any authenticated users, such as subscriber to perform such action...
CVE-2022-1570
CVE-2022-1570 affects the WordPress Files Download Delay plugin (versions prior to 1.0.7). The root cause is missing authorization checks and CSRF protections when resetting plugin settings, allowing any authenticated user (e.g., subscribers) to perform the action. Remediation: upgrade to version...
OPENSUSE-SU-2022:10001-1 Security update for pcmanfm
This update for pcmanfm fixes the following issues: update to 1.3.2: Fixed case when some keyboard shortcuts stopped working: Alt+Home, Alt+Up Fixed sytem reboot delayed for 90 seconds in some cases new upstream release of pcmanfm 1.3.1 fixed crash on reload while directory changes changed size o...
