CVE-2022-34055

The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34066

The Texercise package in PyPI v0.0.1 to v0.0.12 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

GHSA-HHX9-4VW2-X54R RhodeCode and Kallithea are vulnerable to sensitive information disclosure

RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the getrepo API method...

CVE-2021-37254

In M-Files Web product with versions before 20.10.9524.1 and 20.10.9445.0, a remote attacker could use a flaw to obtain unauthenticated access to 3rd party component license key information on server...

Vulnerabilities fixed in OpenSSL

The developers of OpenSSL have fixed two vulnerabilities. The vulnerabilities allow an unauthenticated remote malicious person to remotely able to cause a denial-of-service, or potentially gain access to sensitive data, including possibly private keys currently actively in use on the system. Misu...

PT-2021-10095 · Apache · Apache Ozone

Name of the Vulnerable Software and Affected Versions: Apache Ozone versions prior to 1.1.0 Description: The issue allows unauthorized access to buckets and keys in a secure Apache Ozone Cluster through a curl command or an unauthenticated HTTP request, exposing data to anonymous clients or users...

UBUNTU-CVE-2014-4658

The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file...

PT-2019-13743 · Gogs · Gogs

Name of the Vulnerable Software and Affected Versions: Gogs version 0.11.86 Description: The issue concerns insecure permissions in Gogs, specifically affecting routes related to deploy keys, collaborators, and hooks. This is due to a lack of permission checks in the routes/api/v1/api.go file...

The vulnerability of the IKE protocol implementation in Cisco IOS and Cisco IOS XE operating systems allows attackers to gain access to protected information.

The vulnerability of the IKE protocol’s implementation in Cisco IOS and Cisco IOS XE operating systems is related to decoding errors in traffic. Exploiting this vulnerability can allow a malicious actor to gain access to session keys and decode traffic by sending specially crafted data packets to...

Ubuntu Update for libimobiledevice USN-1927-1

Check for the Version of libimobiledevice OpenVAS Vulnerability Test $Id: gbubuntuUSN19271.nasl 8672 2018-02-05 16:39:18Z teissa $ Ubuntu Update for libimobiledevice USN-1927-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This progr...