2233 matches found
Moderate: Red Hat Security Advisory: Red Hat OpenShift (Logging Subsystem) security update
Logging Subsystem 5.6.1 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the Referenc...
glob-parent: Regular Expression Denial of Service
A vulnerability was found in the glob-parent package. Affected versions of this package are vulnerable to Regular expression Denial of Service ReDoS attacks, affecting system availability...
Rocky Linux 9 : nodejs and nodejs-nodemon (RLSA-2022:6595)
The remote Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2022:6595 advisory. - npm pack ignores root-level .gitignore and .npmignore file exclusion directives when run in a workspace or with a workspace flag ie. --workspaces,...
RHEL 7 : rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon (RHSA-2023:0612)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0612 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...
bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
PT-2023-34774 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue concerns the net/mlx5e driver in the Linux Kernel, specifically with IPoIB and Block PKEY interfaces having fewer receive queues than their parent interfaces. This could potentially...
PT-2023-34149
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description A node refcount leak was discovered in the usb role switch is parent function. The issue was introduced in version v5.4 and is fixed in Linux Kernel version v5.15.86. Recommendations For Linu...
The new Spring Boot version validation and upgrade support in Spring Tools
New releases of Spring Boot are being released on a quite frequent schedule and updating your projects to newer versions of Spring Boot is something that many teams and organizations around the globe do as part of their daily work. Sometimes those upgrades are simple and easy, for example for new...
PT-2023-34464
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A node refcount leak was discovered in the usb role switch is parent function. The issue was introduced in version v5.4 and is fixed in Linux Kernel version v5.10.163. Recommendations For...
PT-2025-40755
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the sifive gpio probe function within the GPIO subsystem for Sifive platforms. The of irq find parent function increments the reference count of a node...
CVE-2021-35065
A vulnerability was found in the glob-parent package. Affected versions of this package are vulnerable to Regular expression Denial of Service ReDoS attacks, affecting system availability...
CVE-2021-35065
The glob-parent package before 6.0.1 for Node.js allows ReDoS regular expression denial of service attacks against the enclosure regular expression...
DEBIAN-CVE-2021-35065
The glob-parent package before 6.0.1 for Node.js allows ReDoS regular expression denial of service attacks against the enclosure regular expression...
CVE-2021-35065
The glob-parent package before 6.0.1 for Node.js allows ReDoS regular expression denial of service attacks against the enclosure regular expression...
UBUNTU-CVE-2021-35065
The glob-parent package before 6.0.1 for Node.js allows ReDoS regular expression denial of service attacks against the enclosure regular expression...
