7048 matches found
RHEL 9 : buildah (RHSA-2024:9459)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9459 advisory. The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a...
ALSA-2024:9454 Important: podman security update
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: go/parser: golang: Calling any of the Parse functions containing deeply nested literals c...
Remote Code Execution (RCE)
pyload-ng is vulnerable to Remote Code Execution RCE. The vulnerability exists due to improper input validation of HTTP requests, allowing attackers to execute arbitrary code...
RHEL 9 : podman (RHSA-2024:9051)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9051 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use contain...
AlmaLinux 9 : podman (ALSA-2024:9051)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:9051 advisory. Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction CVE-2024-9407 buildah: Buildah allows arbitrar...
Important: podman security update
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN...
CVE-2024-51211
SQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1, specifically in the resetuserinfo.php file. The vulnerability is due to improper input validation of the $usernamestnid parameter, which can be manipulated by an attacker to inject arbitrary SQL commands...
CVE-2024-51211
openSIS-Classic 9.1 (OS4ED) contains a SQL injection in resetuserinfo.php via improper input validation of the username_stn_id parameter, enabling an attacker to inject arbitrary SQL commands. Affected component/file: resetuserinfo.php in OS4ED openSIS-Classic version 9.1. Root cause: insufficien...
ROS-20241108-01
A vulnerability in the mac80211 component of the Linux operating system kernel is related to information disclosure in the function stainfofree in net/mac80211/stainfo.c. Exploitation of the vulnerability could allow an attacker to gain access to confidential information A vulnerability in the As...
Improper Input Validation
Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Improper Input Validation of input data stored in the cache. An attacker can manipulate stored data and disrupt the integrity of the cache by injecting malicious input. Remediation Upgrade...
SQL Injection
Funadmin is vulnerable to SQL injection. The vulnerability is due to improper input validation in curd/table/savefield, allowing malicious SQL code to be executed. Attackers can exploit this vulnerability to manipulate database queries, potentially gaining unauthorized access to or tampering with...
SQL Injection
Funadmin is vulnerable to SQL injection. The vulnerability is due to improper input validation in the Curd one-click command mode plugin, allowing user-supplied data to be directly included in SQL queries without sanitization. Attackers can exploit this to execute arbitrary SQL commands...
Security Bulletin: IBM Maximo Application Suite - MVI Component uses jose4j-0.9.3.jar which is vulnerable to this CVE-2023-51775
Summary Security Bulletin: IBM Maximo Application Suite - MVI Component uses jose4j-0.9.3.jar which is vulnerable to this CVE-2023-51775 Vulnerability Details CVEID:CVE-2023-51775 DESCRIPTION: jose4j is vulnerable to a denial of service, caused by improper input validation. By sending a specially...
CVE-2024-49401
Improper input validation in Settings Suggestions prior to SMR Nov-2024 Release 1 allows local attackers to launch privileged activities...
CVE-2024-49402
Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow physical attackers to access data across multiple user profiles...
CVE-2024-49402
Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow physical attackers to access data across multiple user profiles...
CVE-2024-49401
Improper input validation in Settings Suggestions prior to SMR Nov-2024 Release 1 allows local attackers to launch privileged activities...
CVE-2024-49401
CVE-2024-49401 affects Samsung Mobile devices using Settings Suggestions prior to SMR Nov-2024 Release 1. The issue is due to improper input validation in Settings Suggestions, enabling a local attacker with low privileges to perform privileged activities. Impact is described as potential local p...
CVE-2024-34681
The issue affects Galaxy Watch firmware prior to SMR Nov-2024 Release 1, caused by improper input validation in the BluetoothAdapter. This vulnerability allows a local attacker to trigger a local permanent denial of service on the device. Remediation is to update Galaxy Watch to SMR Nov-2024 Rele...