PT-2025-7710

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential use-after-free issue exists in the Linux kernel due to incorrect consumption of the provided buffer list by IORING OP READ when read I/O returns an error, excluding -EAGAIN a...

The vulnerability of the Apache Superset data visualization software lies in authentication errors, which allow an attacker to gain read access to the database.

The vulnerability of the Apache Superset data visualization software is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain read access to the database...

Vulnerability of the landing module of the content management system (CMS) for 1C-Bitrix: A website management tool that allows a hacker to execute OS commands on a vulnerable node, gain control over resources, and penetrate the internal network.

Vulnerability of the landing module of the CMS system: Website management is triggered by synchronization errors when using a common resource. Exploiting this vulnerability allows a malicious actor to remotely execute OS commands on a vulnerable node, gain control over resources, and penetrate th...

SUSE SLES12: libxml2-2 / libxml2-2-32bit / libxml2-devel / libxml2-doc / etc (SUSE-SU-2023:3665-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3665-1 advisory. - CVE-2023-29469: Fixed not deterministic hashing of empty dict strings bsc1210412. - CVE-2023-28484: Fixed NULL dereference in...

Catalog Creation or Change Master Image fails when attempting to create ProvVM

Machine Creation Services actions, such as catalog creation, master image change, or adding additional VMs, may error unexpectedly for failure to create image preparation machine. CDF traces may indicate one of the following: "Error: creating virtual machine failed. AzureWriter-1 timed out while...

The vulnerability of the application programming interface for the declarative delivery tool for GitOps for Kubernetes Argo CD lies in authentication errors, which allow a perpetrator to bypass established access controls.

The vulnerability of the application programming interface for the declarative delivery tool of GitOps for Kubernetes Argo CD is related to authentication errors. Exploiting this vulnerability allows a malicious actor to bypass established access controls...

The vulnerability of the MSHTML platform in Windows operating systems allows attackers to circumvent existing security restrictions.

The vulnerability of the MSHTML platform in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

XenServer stay in Disabled state after rebooting, after a while it got disconnected from pool

XenServer stay in Disabled state after rebooting, and after a while it got disconnected from pool. Try to enable host by CLI, it reports "Pool Master is unreachable" root@test-xs xe host-enable host=test-xs Seen from /var/log/xensource.log like below: Mar 16 11:28:48 test-xs xapi: debug||0...

The vulnerability of the SslConnections component in Eclipse Jetty servers allows a attacker to cause a service failure.

The vulnerability of the SslConnections component in Eclipse Jetty servers is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the ds_compress.cc component in the MariaDB database management system allows a hacker to cause a service failure.

The vulnerability of the dscompress.cc component in the MariaDB database management system arises due to blocking resource errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the onCreate method in Android operating systems allows attackers to escalate their privileges.

The vulnerability of the onCreate method in Android operating systems is related to state management errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Keycloak identity and access management software lies in errors during the certificate verification process, which allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Keycloak identity and access management software is related to errors in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

The vulnerability of Microsoft Exchange Server’s mail server, related to access control errors, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Exchange Server is related to access control errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the server’s account context through a remote network call...

The vulnerability of the Keycloak identity and access management software lies in errors during the certificate verification process, which allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Keycloak identity and access management software is related to errors in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

PT-2023-5241 · 1с · 1С-Битрикс

Name of the Vulnerable Software and Affected Versions: 1С-Битрикс: Управление сайтом affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the landing module of the 1С-Битрикс site management system. Exploitation of this issue m...

Advisory ROSA-SA-2023-2235

Software: libgit2 1.4.5 OS: ROSA-CHROME packageevrstring: libgit2-1.4.5-1.src.rpm CVE-ID: CVE-2023-22742 BDU-ID: 2023-00574 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the libssh2 library of the C Libgit2 implementation of Git methods is related to cryptographic signature verification errors...

Advisory ROSA-SA-2023-2232

Software: firefox 102.14.0 OS: rosa-server79 packageevrstring: firefox-102.14.0-3.res7.x8664.rpm CVE-ID: CVE-2023-3417 BDU-ID: 2023-03965 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Thunderbird email client exists due to improper handling of the Unicode character for overriding text directio...

CVE-2023-40725

A vulnerability has been identified in QMS Automotive All versions V12.39. The affected application returns inconsistent error messages in response to invalid user credentials during login session. This allows an attacker to enumerate usernames, and identify valid usernames...

glibc Resource Management Error Vulnerability

glibc GNU C Library is a C standard library implemented by a GNU project of the GNU community. A resource management error vulnerability exists in glibc, which stems from the fact that the gaihinet function may use freed memory, causing the application to crash...