7181 matches found
Annotation Tool path traversal vulnerability
Annotation Tool is a Bonn activity map annotation tool open sourced by bonn-activity-maps. 2021-08-31 and earlier versions of Annotation Tool are vulnerable to a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in a resource o...
openSUSE: Security Advisory for qemu (SUSE-SU-2022:2260-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2021-3433
Invalid channel map in CONNECTIND results to Deadlock. Zephyr versions = v2.5.0 Improper Check or Handling of Exceptional Conditions CWE-703. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3c2f-w4v6-qxrp...
Design/Logic Flaw
Invalid channel map in CONNECTIND results to Deadlock. Zephyr versions = v2.5.0 Improper Check or Handling of Exceptional Conditions CWE-703. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3c2f-w4v6-qxrp...
GSD-2022-1003654 bpf: Fix excessive memory allocation in stack_map_alloc()
bpf: Fix excessive memory allocation in stackmapalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...
libtimezonemap bug fix and enhancement update
An update is available for libtimezonemap. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libtimezonemap packages contain a time zone map widget for the GTK...
gnome-initial-setup bug fix and enhancement update
An update is available for gnome-initial-setup. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnome-initial-setup packages provide the Initial Setup...
gnome-initial-setup bug fix and enhancement update
An update is available for gnome-initial-setup. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnome-initial-setup packages provide the Initial Setup...
gnome-control-center bug fix and enhancement update
An update is available for gnome-control-center. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnome-control-center package contains configuration utilitie...
gnome-control-center bug fix and enhancement update
An update is available for gnome-control-center. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnome-control-center package contains configuration utilitie...
PT-2022-10334 · Zephyr · Zephyr
Name of the Vulnerable Software and Affected Versions: Zephyr versions = v2.5.0 Description: The issue arises from an invalid channel map in CONNECT IND, resulting in a deadlock due to improper check or handling of exceptional conditions. This is classified as CWE-703. Recommendations: For Zephyr...
CVE-2022-33094
74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/job/map...
CVE-2022-33094
74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/job/map...
CVE-2022-33094
74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/job/map...
MAL-2022-6733 Malicious code in ucs-map (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d5592ffb464b4e507aff7a98cbf774a4200f3adbc52563909384a63ada6c58e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ucs-map (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d5592ffb464b4e507aff7a98cbf774a4200f3adbc52563909384a63ada6c58e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1286 Malicious code in azure-arm-servicemap-samples-ts-beta (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 879b0fdb17c1119e579e5f7d71290575b29a45995616e170b1d21d8d316d5b09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2022:2065-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2065-1 advisory. - IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs;...
Kity Minder 代码问题漏洞
Baidu Kity Minder Baidu Brain Map is a handy thinking tool from Baidu, a Chinese company. A security vulnerability exists in Kity Minder v1.3.5, which was discovered via a server-side request forgery SSRF vulnerability in the init function in ImageCapture.class.php...
OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...