10607 matches found
July 12, 2022—KB5015808 (OS Build 14393.5246) - EXPIRED
None None...
July 12, 2022—KB5015827 (OS Build 20348.825)
None None...
CVE-2022-2366 Incorrect defaults can cause attackers to bypass rate limitations
Incorrect default configuration for trusted IP header in Mattermost version 6.7.0 and earlier allows attacker to bypass some of the rate limitations in place or use manipulated IPs for audit logging via manipulating the request headers...
CVE-2022-2366
Mattermost CVE-2022-2366 affects Mattermost
CVE-2022-2366 Incorrect defaults can cause attackers to bypass rate limitations
Incorrect default configuration for trusted IP header in Mattermost version 6.7.0 and earlier allows attacker to bypass some of the rate limitations in place or use manipulated IPs for audit logging via manipulating the request headers...
CVE-2022-2366
Incorrect default configuration for trusted IP header in Mattermost version 6.7.0 and earlier allows attacker to bypass some of the rate limitations in place or use manipulated IPs for audit logging via manipulating the request headers...
The vulnerability of the logging function in the microprogramming software of the Cisco TelePresence Collaboration Endpoint (CE) and the Cisco RoomOS operating system allows a intruder to gain unauthorized access to protected information.
The vulnerability of the logging function in the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call management device and the Cisco RoomOS operating system is related to the disclosure of information through registration files. Exploiting this vulnerability...
CVE-2022-2366: Incorrect Default Permissions
Incorrect default configuration for trusted IP header in Mattermost version 6.7.0 and earlier allows attacker to bypass some of the rate limitations in place or use manipulated IPs for audit logging via manipulating the request headers...
EulerOS 2.0 SP9 : cifs-utils (EulerOS-SA-2022-1990)
According to the versions of the cifs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers...
xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr
A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...
CVE-2022-20768
A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint CE and RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to the storage of certain unencrypted credentials...
Design/Logic Flaw
A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint CE and RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to the storage of certain unencrypted credentials...
CVE-2022-20768
The CVE-2022-20768 entry concerns Cisco TelePresence Collaboration Endpoint (CE) and RoomOS Software. The core issue is a vulnerability in the logging component where unencrypted credentials can be stored, allowing an authenticated, remote attacker to access audit logs and obtain credentials that...
Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability
A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint CE and RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to the storage of certain unencrypted credentials...
CVE-2022-20768: Insertion of Sensitive Information into Log File
A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint CE and RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to the storage of certain unencrypted credentials...
ROS-20220706-01
A vulnerability in the OpenSSH session encryption suite of programs is related to the fact that the application does not properly enforce security restrictions when the keyword parameter LogVerbose keyword parameter is enabled with a set of parameters that activate logging for an isolated process...
PT-2022-3509
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Collaboration Endpoint CE and RoomOS Software affected versions not specified Description A vulnerability in the logging component could allow an authenticated, remote attacker to view sensitive information in clear text on ...
Insider Threat: Employees indicted for stealing $88 million of license keys
Two insiders and an accomplice were indicted on Tuesday for multiple counts of fraud. According to documents unsealed by the Wester District of Oaklahoma, a grand jury charged Raymond Bradley Pearce aka Brad Pearce, a former employee of Avaya; Dusti O. Pearce, his wife; and Jason M. Hines aka Joe...
SUSE-SU-2020:0026-2 Security update for sysstat
This update for sysstat fixes the following issues: Security issue fixed: - CVE-2019-19725: Fixed double free in checkfileactlst in sacommon.c bsc1159104. Bug fixes: - Enable log information of starting/stoping services. bsc1144923, jscSLE-5958...
