3298 matches found
Deno improperly handles resizable ArrayBuffer
Impact Resizable ArrayBuffers passed to asynchronous native functions that are shrunk during the asynchronous operation could result in an out-of-bound read/write. It is unlikely that this has been exploited in the wild, as the only version affected is Deno 1.32.0. Deno Deploy users are not...
GHSA-C25X-CM9X-QQGX Deno improperly handles resizable ArrayBuffer
Impact Resizable ArrayBuffers passed to asynchronous native functions that are shrunk during the asynchronous operation could result in an out-of-bound read/write. It is unlikely that this has been exploited in the wild, as the only version affected is Deno 1.32.0. Deno Deploy users are not...
CVE-2022-4009
In affected versions of Octopus Deploy it is possible for a user to introduce code via offline package creation...
CVE-2022-4009
In affected versions of Octopus Deploy it is possible for a user to introduce code via offline package creation...
Code injection
In affected versions of Octopus Deploy it is possible for a user to introduce code via offline package creation...
CVE-2022-4009
In affected versions of Octopus Deploy it is possible for a user to introduce code via offline package creation...
CVE-2022-4009
In affected versions of Octopus Deploy it is possible for a user to introduce code via offline package creation...
CVE-2022-4009: Improper Neutralization of Special Elements used in a Command
In affected versions of Octopus Deploy it is possible for a user to introduce code via offline package creation...
CVE-2022-4009
CVE-2022-4009 affects Octopus Deploy; the vulnerability allows a user to introduce code via offline package creation, leading to potential command injection. The provided documents do not specify exact affected versions or a published fix. Additional connected sources mention Octopus Deploy conte...
Octopus Deploy command injection vulnerability
Octopus Deploy is an automation tool for .NET, Java, and other application development and deployment from Octopus Deploy Australia. A command injection vulnerability exists in Octopus Deploy, which originates from a user being able to perform command injection by creating offline packages. The...
March 14, 2023âKB5023759 (Security-only update)
None None...
CVE-2022-2258
In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permissions to view these items...
CVE-2022-2259
In affected versions of Octopus Deploy it is possible for a user to view Workerpools without being explicitly assigned permissions to view these items...
CVE-2022-2258
In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permissions to view these items...
CVE-2022-2259
In affected versions of Octopus Deploy it is possible for a user to view Workerpools without being explicitly assigned permissions to view these items...
Code injection
In affected versions of Octopus Deploy it is possible for a user to view Workerpools without being explicitly assigned permissions to view these items...
Code injection
In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permissions to view these items...
PT-2023-12708
Name of the Vulnerable Software and Affected Versions Octopus Deploy affected versions not specified Description The issue allows a user to view Workerpools without having explicit permissions to do so. Recommendations At the moment, there is no information about a newer version that contains a f...
CVE-2022-2259
In affected versions of Octopus Deploy it is possible for a user to view Workerpools without being explicitly assigned permissions to view these items...
CVE-2022-2259: Improper Access Control
In affected versions of Octopus Deploy it is possible for a user to view Workerpools without being explicitly assigned permissions to view these items...