5772 matches found
SUSE SLED15 / SLES15 Security Update : xstream (SUSE-SU-2022:0817-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:0817-1 advisory. - CVE-2021-43859: Fixed a denial of service when unmarshalling highly recursive collections or maps bsc1195458. Tenable...
CVE-2022-24760
Parse Server is an open source http web server backend. In versions prior to 4.10.7 there is a Remote Code Execution RCE vulnerability in Parse Server. This vulnerability affects Parse Server in the default configuration with MongoDB. The main weakness that leads to RCE is the Prototype Pollution...
Default configuration
Parse Server is an open source http web server backend. In versions prior to 4.10.7 there is a Remote Code Execution RCE vulnerability in Parse Server. This vulnerability affects Parse Server in the default configuration with MongoDB. The main weakness that leads to RCE is the Prototype Pollution...
GHSA-57J2-W4CX-62H2 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, scala, cassandra-reaper, management-api-for-apache-cassandra-4.0...
GHSA-57J2-W4CX-62H2 vulnerabilities
Vulnerabilities for packages: cassandra-reaper, management-api-for-apache-cassandra-5.0, scala...
CVE-2022-24760
The set of connected sources confirms CVE-2022-24760 is a real vulnerability in Parse Server (pre-4.10.7) caused by prototype pollution in DatabaseController.js, enabling Remote Code Execution with default MongoDB configurations on Linux/Windows. Impact is described as RCE (high severity) with a ...
CVE-2022-24760 Command Injection in Parse server
Parse Server is an open source http web server backend. In versions prior to 4.10.7 there is a Remote Code Execution RCE vulnerability in Parse Server. This vulnerability affects Parse Server in the default configuration with MongoDB. The main weakness that leads to RCE is the Prototype Pollution...
CVE-2022-24760 Command Injection in Parse server
Parse Server is an open source http web server backend. In versions prior to 4.10.7 there is a Remote Code Execution RCE vulnerability in Parse Server. This vulnerability affects Parse Server in the default configuration with MongoDB. The main weakness that leads to RCE is the Prototype Pollution...
Nextcloud Server < 21.0.8, 22.x < 22.2.4, 23.x < 23.0.1 DoS Vulnerability (GHSA-jf3h-xf4q-mh89)
Nextcloud Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
GHSA-CRP2-QRR5-8PQ7 vulnerabilities
Vulnerabilities for packages: ctop...
GHSA-CRP2-QRR5-8PQ7 vulnerabilities
Vulnerabilities for packages: ctop...
GHSA-GV9J-4W24-Q7VX vulnerabilities
Vulnerabilities for packages: juicefs...
OpenMRS 1.6 - 2.5.x Directory Traversal Vulnerability (GHSA-8rgr-ww69-jv65)
OpenMRS is prone to a directory traversal vulnerability in the startup filter. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program ...
Ruby on Rails Information Disclosure Vulnerability (GHSA-rmj8-8hhh-gv5h) - Linux
Ruby on Rails is prone to an information disclosure vulnerability in puma. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
Ruby on Rails Information Disclosure Vulnerability (GHSA-rmj8-8hhh-gv5h) - Windows
Ruby on Rails is prone to an information disclosure vulnerability in puma. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
Ruby on Rails Information Disclosure Vulnerability (GHSA-wh98-p28r-vrc9) - Windows
Ruby on Rails is prone to an information disclosure vulnerability in Action Pack. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...
GHSA-CG3Q-J54F-5P7P vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner...
GHSA-CG3Q-J54F-5P7P vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner...