5013 matches found
Nextcloud Server Access Control Vulnerability (GHSA-3m2f-v8x7-9w99)
Nextcloud Server is prone to an access control vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Redis < 6.0.19, 6.2.x < 6.2.12, 7.0.x < 7.0.11 DoS Vulnerability
Redis is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:redis:redis"; if...
Oracle Linux 7 : thunderbird (ELSA-2023-1806)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-1806 advisory. 102.10.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build 102.10.0-2 - Update to...
GHSA-CJR9-MR35-7XH6
creationtimestamp| type| source ---|---|--- 2023-04-15 00:26:24+00:00| published-proof-of-concept| https://t.me/cibsecurity/62198...
Nextcloud Server 24.0.4 < 24.0.7, 25.x < 25.0.1 Improper Access Control Vulnerability (GHSA-7w6h-5qgw-4j94)
Nextcloud Server is prone to an improper access control vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
FreeBSD : py39-OWSLib -- arbitrary file read vulnerability (e5d117b3-2153-4129-81ed-42b0221afa78)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e5d117b3-2153-4129-81ed-42b0221afa78 advisory. - OWSLib is a Python package for client programming with Open Geospatial Consortium OGC web service...
Nextcloud Server 25.x < 25.0.3 DoS Vulnerability (GHSA-53q2-cm29-7j83)
Nextcloud Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
GHSA-CJR9-MR35-7XH6 vulnerabilities
Vulnerabilities for packages: spicedb...
MAL-2023-432 Malicious code in fca-zach-remade (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9647625dc78eb955e2d970aa60159a08d9e50e1e80f1be250861c8428d918935 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-W4M3-43GP-X8HX vulnerabilities
Vulnerabilities for packages: dotnet...
GHSA-232P-VWFF-86MP vulnerabilities
Vulnerabilities for packages: melange, ctop, bom, ko, up, helm, apko...
GHSA-33PG-M6JH-5237 vulnerabilities
Vulnerabilities for packages: melange, ctop, bom, ko, up, helm, apko...
GHSA-6WRF-MXFJ-PF5P vulnerabilities
Vulnerabilities for packages: melange, up, helm, ko, apko, ctop, bom...
GHSA-6WRF-MXFJ-PF5P vulnerabilities
Vulnerabilities for packages: melange, ctop, bom, ko, up, helm, apko...
CVE-2023-28842 moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated
Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...
Nextcloud Server 25.x < 25.0.3 DoS Vulnerability (GHSA-9wmj-gp8v-477j)
Nextcloud Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
MAL-2023-653 Malicious code in omnigodz_testpkg (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b71e35f587d48902bd1b3b26de78a66c82c7f28faf7e7d339b607497d40cc318 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Nextcloud Server 24.x < 24.0.9, 25.x < 25.0.3 Incorrectly-Resolved Name or Reference Vulnerability (GHSA-hhq4-4pr8-wm27)
Nextcloud Server is prone to an incorrectly-resolved name or reference vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...