507 matches found
SUSE CVE-2016-9856
An XSS issue was discovered in phpMyAdmin because of an improper fix for CVE-2016-2559 in PMASA-2016-10. This issue is resolved by using a copy of a hash to avoid a race condition. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to 4.0.10.18 are...
SUSE CVE-2020-12802
LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed...
SUSE CVE-2020-26145
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second or subsequent broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets...
SUSE CVE-2021-41222
TensorFlow is an open source platform for machine learning. In affected versions the implementation of SplitV can trigger a segfault is an attacker supplies negative arguments. This occurs whenever sizesplits contains more than one value and at least one value is negative. The fix will be include...
UBUNTU-CVE-2022-24894
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The Symfony HTTP cache system, acts as a reverse proxy: It caches entire responses including headers and returns them to the clients. In a recent change in the AbstractSessionListener, the response...
UBUNTU-CVE-2022-24895
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. When authenticating users Symfony by default regenerates the session ID upon login, but preserves the rest of session attributes. Because this does not clear CSRF tokens upon login, this might enable...
CVE-2023-0447
creationtimestamp| type| source ---|---|--- 2023-01-23 20:24:04+00:00| seen| https://t.me/cibsecurity/56866...
AZL-13151 CVE-2022-48281 affecting package libtiff for versions less than 4.4.0-7
processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow e.g., "WRITE of size 307203" via a crafted TIFF image...
PT-2023-14636 · Perfsonar · Perfsonar
Name of the Vulnerable Software and Affected Versions: perfSONAR versions prior to 4.4.6 Description: The issue inadvertently supports the parse option for a file:// URL. Recommendations: For versions prior to 4.4.6, update to version 4.4.6 or later to resolve the issue...
CVE-2022-44137
creationtimestamp| type| source ---|---|--- 2022-12-30 07:13:38+00:00| seen| https://t.me/cibsecurity/55544 2025-04-11 22:51:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11495...
Contec CONPROSYS HMI System 操作系统命令注入漏洞
Contec CONPROSYS HMI System is an HTML5-based HMI Human Machine Interface/SCADA Supervisory Control and Data Acquisition software product from Contec Japan. A security vulnerability exists in Contec CONPROSYS HMI System CHS Ver.3.4.4 and earlier versions, which is rooted in susceptibility to an O...
CVE-2022-4403
creationtimestamp| type| source ---|---|--- 2022-12-11 18:20:13+00:00| seen| https://t.me/cibsecurity/54264...
PT-2022-36284 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.156 Description: The issue is related to a possible memory leak caused by a missing pci dev put call. This problem was introduced in version v4.4 and is fixed in Linux Kernel version v5.10.156. The actual...
CVE-2022-41944 Discourse users can see notifications for topics they no longer have access to
Discourse is an open-source discussion platform. In stable versions prior to 2.8.12 and beta or tests-passed versions prior to 2.9.0.beta.13, under certain conditions, a user can see notifications for topics they no longer have access to. If there is sensitive information in the topic title, it...
PT-2022-6814 · Unknown +1 · Openimageio +1
Name of the Vulnerable Software and Affected Versions: OpenImageIO version 2.4.4.2 Description: Multiple code execution vulnerabilities exist in the IFFOutput::close functionality of OpenImageIO. A specially crafted ImageOutput Object can lead to a heap buffer overflow. This issue arises when the...
CVE-2022-44312
creationtimestamp| type| source ---|---|--- 2022-11-08 18:35:14+00:00| seen| https://t.me/cibsecurity/52642...
PT-2022-5906 · Siemens · Sicam P855 +2
Name of the Vulnerable Software and Affected Versions: POWER METER SICAM Q100 versions prior to V2.50 SICAM P850 versions prior to V3.10 SICAM P855 versions prior to V3.10 Description: The issue is related to errors in processing input data, specifically with the Language parameter in the web...
Gluu 代码问题漏洞
Gluu is a cloud-hosted identity platform from the US-based Gluu organization. A security vulnerability exists in Gluu Oxauth versions prior to v4.4.1, which can be exploited by an attacker to perform a server-side request forgery SSRF attack via a crafted requesturi parameter...