HPE NonStop EMS Distributor buffer error vulnerability

The HPE NonStop EMS Distributor T9632L01 ACC and earlier versions contain a buffer error vulnerability stemming from a buffer overflow, which may lead to improper behavior...

Rocky Linux 8 [CIQ] Security Update: wget / wget-debuginfo / wget-debugsource (crlsa-2024_5299)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20245299 advisory. wget: Misinterpretation of input may lead to improper behavior CVE-2024-38428 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 9 [CIQ] Security Update: wget / wget-debuginfo / wget-debugsource (crlsa-2024_6192)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20246192 advisory. wget: Misinterpretation of input may lead to improper behavior CVE-2024-38428 Tenable has extracted the preceding description block directly from the CIQ security...

ROS-20260724-73-0048

The vulnerability of the JOIN::fixallsplittingsinplan function in the MariaDB database management system is related to improper behavior. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Rack Modular Interface Bypass

The vulnerability of the Ruby-based Rack web server’s modular interface is related to improper behavior. Exploiting this vulnerability allows a remote attacker to bypass existing security mechanisms...

OpenEMR Privilege Escalation

The vulnerability of the OpenEMR system for medical documentation is related to improper behavior patterns. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

MariaDB JOIN::fix_all_splittings_in_plan DoS

The vulnerability of the JOIN::fixallsplittingsinplan function in the MariaDB database management system is related to improper behavior. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

MariaDB DoS

The vulnerability of the MariaDB database management system is related to improper behavior. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

MariaDB DoS

The vulnerability of the Itemdirectviewref::derivedfieldtransformerforwhere function in the MariaDB database management system is related to improper behavior. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

sdm845-db845c Kernel DoS

The vulnerability of the sdm845-db845c component in the Linux operating system is related to improper behavior. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20250505-03

Vulnerability in MySQL Server component is related to improper order of behavior. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

Moderate: Red Hat Security Advisory: wget security update

An update for wget is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

wget security update

1.21.1-8 - Resolves: RHEL-43226 - Misinterpretation of input may lead to improper behavior...

Moderate: wget security update

The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fixes: wget: Misinterpretation of input may lead to improper behavior CVE-2024-38428 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and othe...

Atlassian Jira Authentication Bypass XSS

The vulnerabilities of Atlassian’s data processing products—Jira, Jira Service Management, Confluence, Bitbucket, Bamboo, Crowd, Fisheye, and Crucible—are related to improper behavior. Exploiting these vulnerabilities allows attackers to bypass authentication procedures and execute cross-site...

CVE-2021-22004

An improper authentication flaw was found in SaltStack salt before version 3003.3. The Salt minion installer accepts and uses a minion config file at C:\salt\conf if that file is in place before the installer is run. This flaw allows a malicious actor to subvert the proper behavior of the given...