Remote Administration Daemon Maintenance Failure

The vulnerability of the Remote Administration Daemon component for operating systems based on Oracle Solaris is related to errors in resource release. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through various network protocols...

SMB Server DoS

The vulnerability of the SMB Server component in Oracle Solaris relates to resource release errors. Exploiting this vulnerability can allow an attacker to cause service failures...

Oracle MySQL Server DoS

The vulnerability of the Oracle MySQL Server component in the Oracle Database Management System involves errors related to resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL protocol...

Oracle MySQL Server DoS

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the MySQL protocol...

PT-2022-3779

Name of the Vulnerable Software and Affected Versions MySQL Shell versions 8.0.28 and prior Description The issue is related to resource release errors in the Oracle MySQL Shell component. It may allow an attacker to cause a denial of service. The exploitation requires an unauthenticated attacker...

PT-2022-3777

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue is related to the Remote Administration Daemon component and is caused by resource release errors. It allows an unauthenticated attacker with network access via multiple protocols to compromise...

PT-2022-3774

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 8.0.29 and prior Description The issue is related to errors in resource release in the encryption component of the Oracle MySQL Server system. It allows a remote attacker to cause a denial of service using the MySQ...

riscv-isa-sim security vulnerabilities

riscv-isa-sim is a RISC-V ISA simulator. A security vulnerability exists in riscv-isa-sim that stems from an incorrect implementation of exception prioritization when accessing memory...

Firefox Thunderbird DoS

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to errors during initialization. Exploiting these vulnerabilities can allow a malicious actor to trigger service interruptions by using a specially created message...

netback driver DoS

The vulnerability of the netback driver for Linux operating systems is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

[SECURITY] Fedora 35 Update: golang-github-pelletier-toml-1.9.4-2.fc35

Go-toml provides the following features for using data parsed from TOML documents: - Load TOML documents from files and string data - Easily navigate TOML structure using Tree - Mashaling and unmarshaling to and from data structures - Line & column position data for all parsed elements - Query...

Kubeaudit - Tool To Audit Your Kubernetes Clusters Against Common Security Controls

kubeaudit is a command line tool and a Go package to audit Kubernetes clusters for various different security concerns, such as: run as non-root use a read-only root filesystem drop scary capabilities, don't add new ones don't run privileged and more! tldr.kubeaudit makes sure you deploy secure...

Upgraded Q -> M from 358 [1657932899986]

Judge has assessed an item in Issue 358 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...

Upgraded Q -> M from 316 [1657933321396]

Judge has assessed an item in Issue 316 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...

Upgraded Q -> M from 279 [1657955636898]

Judge has assessed an item in Issue 279 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...

OPC UA Modicon Communication Module DoS

The vulnerability of the microprogramming software for the OPC UA Modicon Communication Module BMENUA0100 and the X80 advanced RTU Communication Module BMENOR2200H is related to JSON content processing errors. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Microsoft Office Security Configuration Bypass

The vulnerability of Microsoft Office packages is related to security configuration errors. Exploiting this vulnerability can allow attackers to circumvent security restrictions...

OPC UA Modicon Communication Module DoS

The vulnerability of the microprogramming software for the OPC UA Modicon Communication Module BMENUA0100 and the X80 advanced RTU Communication Module BMENOR2200H is related to errors in cookie file processing. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Upgraded Q -> M from 330 [1657894706461]

Judge has assessed an item in Issue 330 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...

Upgraded Q -> M from 417 [1657853118593]

Judge has assessed an item in Issue 417 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...