Lucene search
+L

211 matches found

Github Security Blog
Github Security Blog
added 2024/04/24 9:1 p.m.47 views

Rancher's Failure to delete orphaned role bindings does not revoke project level access from group based authentication

Impact This vulnerability only affects customers using group based authentication in Rancher versions up to and including 2.4.17, 2.5.11 and 2.6.2. When removing a Project Role associated to a group from a project, the bindings that grant access to cluster scoped resources for those subjects do n...

8.8CVSS7.1AI score0.00955EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/08/23 5:6 p.m.6 views

DRUPAL-CONTRIB-2023-039

This module aims to prevent broken content references by informing content editors either on delete or archive moderation. The module provides an "orphaned content" report for broken references, which may reveal titles of unpublished content...

6.8AI score
SaveExploits0References1
Drupal
Drupal
added 2023/08/23 12:0 a.m.13 views

SafeDelete - Moderately critical - Access bypass - SA-CONTRIB-2023-039

This module aims to prevent broken content references by informing content editors either on delete or archive moderation. The module provides an "orphaned content" report for broken references, which may reveal titles of unpublished content...

6.9AI score
SaveExploits0References8
Citrix
Citrix
added 2023/08/23 12:0 a.m.15 views

Efficiently manage orphaned Azure resources with Citrix

Orphaned resources are unused resources present in the system and they can lead to unnecessary expenses. Citrix provides a detailed scanning functionality to identify orphaned resources present in the system offering administrators better ways for resource management. This feature helps in cost...

7.1AI score
SaveExploits0
Citrix
Citrix
added 2023/08/16 12:0 a.m.11 views

Leaving non-persistent virtual machines of the provisioning scheme at the hypervisor is not allowed.

Unable to delete orphaned VMs by using Powershell from catalog which has already been removed via Powershell. When running command: Remove-ProvScheme The below error is seen: "Leaving the non-persistent virtual machines of the provisioning scheme 'provisioning scheme name' at the hypervisor is no...

7.1AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2023/03/07 2:0 p.m.78 views

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.8CVSS6.6AI score0.0045EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:7 a.m.6 views

SUSE CVE-2008-3652

src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" phase 1 handle when it has been initiated remotely, which allows remote attackers to cause a denial of service resource consumption...

7.8CVSS6.8AI score0.03435EPSS
SaveExploits1References6
SUSE CVE
SUSE CVE
added 2023/02/15 6:0 a.m.12 views

SUSE CVE-2010-0425

modules/arch/win32/modisapi.c in modisapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapiunload for an ISAPI .dll module, which allows remote attackers ...

10CVSS9.4AI score0.94248EPSS
SaveExploits13References6
SUSE CVE
SUSE CVE
added 2023/02/15 3:23 a.m.7 views

SUSE CVE-2022-42310

Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the Xenstore data base, as the cleanup after the error will not remove all nodes already created. When the transaction is...

6CVSS7AI score0.00264EPSS
SaveExploits0References19
Tenable Nessus
Tenable Nessus
added 2022/12/23 12:0 a.m.56 views

Fedora 36 : xen (2022-07438e12df)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-07438e12df advisory. x86: unintended memory sharing between guests XSA-412, CVE-2022-42327 Xenstore: Guests can crash xenstored XSA-414, CVE-2022-42309 Xenstore: Guests...

8.8CVSS6.8AI score0.00277EPSS
SaveExploits0References20
OSV
OSV
added 2022/12/06 1:25 p.m.6 views

SUSE-SU-2022:4332-1 Security update for xen

This update for xen fixes the following issues: - CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318: xen: Xenstore: Guests can let xenstored run out of memory bsc1204482 - CVE-2022-42309: xen: Xenstore: Guests can crash...

8.8CVSS6.4AI score0.00277EPSS
SaveExploits0References28
Tenable Nessus
Tenable Nessus
added 2022/11/21 12:0 a.m.32 views

Xenstore: Guests can create orphaned Xenstore nodes (XSA-415)

By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the Xenstore data base, as the cleanup after the error will not remove all nodes already created. When the transaction is committed after this situation, nodes without a valid...

5.5CVSS5.6AI score0.00264EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/11/13 12:0 a.m.40 views

SUSE SLES12: xen / xen-doc-html / xen-libs / xen-libs-32bit / xen-tools / etc (SUSE-SU-2022:3960-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3960-1 advisory. - CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318: xen: Xenstore...

8.8CVSS6.8AI score0.00277EPSS
SaveExploits0References43
NVD
NVD
added 2022/11/01 1:15 p.m.15 views

CVE-2022-42310

Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the Xenstore data base, as the cleanup after the error will not remove all nodes already created. When the transaction is...

5.5CVSS0.00264EPSS
SaveExploits0References8
OSV
OSV
added 2022/11/01 1:15 p.m.5 views

ALPINE-CVE-2022-42310

Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the Xenstore data base, as the cleanup after the error will not remove all nodes already created. When the transaction is...

5.5CVSS7AI score0.00264EPSS
SaveExploits0References1
OSV
OSV
added 2022/11/01 1:15 p.m.2 views

DEBIAN-CVE-2022-42310

Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the Xenstore data base, as the cleanup after the error will not remove all nodes already created. When the transaction is...

5.5CVSS5.6AI score0.00264EPSS
SaveExploits0References1
OSV
OSV
added 2022/11/01 1:15 p.m.31 views

CVE-2022-42310

Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the Xenstore data base, as the cleanup after the error will not remove all nodes already created. When the transaction is...

5.5CVSS2AI score
SaveExploits0References8
Prion
Prion
added 2022/11/01 1:15 p.m.22 views

Design/Logic Flaw

Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the Xenstore data base, as the cleanup after the error will not remove all nodes already created. When the transaction is...

1.7CVSS5.5AI score0.00264EPSS
SaveExploits0References8Affected Software3
OSV
OSV
added 2022/11/01 1:15 p.m.4 views

UBUNTU-CVE-2022-42310

Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the Xenstore data base, as the cleanup after the error will not remove all nodes already created. When the transaction is...

5.5CVSS5.8AI score0.00264EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2022/11/01 1:15 p.m.47 views

CVE-2022-42310

Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the Xenstore data base, as the cleanup after the error will not remove all nodes already created. When the transaction is...

5.5CVSS6AI score0.00264EPSS
SaveExploits0References5
Rows per page
Query Builder