InnoDB DoS

The vulnerability of the InnoDB component in the MariaDB and MySQL database management systems is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service failures...

Node Set-value module Type Conversion Confidential Data Compromise

The vulnerability of the Node Set-value module is related to type conversion errors. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause service failures...

GitLab Task Tracking Confidential Data Compromise

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the ability for users to create and track issues for Sentry errors. Exploiting this vulnerability allows a malicious actor to gain access to confidential data and compromise its integri...

Server MySQL Locking DoS

The vulnerability of the Server component: Locking the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

InnoDB DoS

The vulnerability of the InnoDB component in the MariaDB and MySQL database management systems is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service failures...

Golang net/http/httputil Component Compromise

The vulnerability of the net/http/httputil component in the Golang programming language is related to authentication errors. Exploiting this vulnerability allows an attacker to compromise data integrity...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2022-9260)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9260 advisory. - drm/i915: Flush TLBs before releasing backing store Tvrtko Ursulin Orabug: 33835812 CVE-2022-0330 - drm/i915: Reduce locking in execlist command...

MySQL Optimizer DoS

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

MySQL Optimizer DoS

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

BizTalk Server ESB Toolkit Spoofing

The vulnerability of the BizTalk Server BizTalk ESB Toolkit relates to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...

PT-2022-2349 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Advanced Local Procedure Call ALPC handler of the Windows operating system. This can allow an attacker to...

Mosquitto Resource Leak DoS

The vulnerability of the Mosquitto messaging broker is related to incorrect processing of the PUBLISH packet when the topic length is zero. Exploiting this vulnerability allows a remote attacker to cause a service failure...

MySQL Optimizer DoS

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

MySQL Stored Procedure Resource Leak DoS

The vulnerability of the Server: Stored Procedure component of the MySQL database is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

Microsoft Windows Privilege Escalation

The vulnerability of the user profile service in the Microsoft Windows operating system is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to enhance their privileges...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the trakboxsize function in the MP4Box multimedia platform’s command set is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

OTRS Ticket Request System Confidential Data Access

The vulnerability of the OTRS ticket request system is related to errors in permission processing. Exploiting this vulnerability allows a remote attacker to access confidential data...

DEBIAN-CVE-2022-24758

The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter server logs by...

Joomla! 4.x < 4.1.1 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.10.7 or 4.x prior to 4.1.1. It is, therefore, affected by multiple vulnerabilities. - Extracting an specifilcy crafted tar package could write files outside of the intended path...

glibc realpath Confidential Information

The vulnerability of the realpath function in the glibc system library is related to memory release errors. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...