3403 matches found
Design/Logic Flaw
A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated...
Unable open PVS console: The specified authorization group does not exist
Unable open PVS console:The specified authorization group does not exist...
CVE-2021-34475
Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...
Failed to paste the copied content from client to Linux VDA
Copy content from a client machine to a Linux desktop failed randomly, nothing will be pasted into the Linux desktop. Meanwhile, this issue is not observed in a Windows VDA accessed from the same client machine. Copy content from a client machine, e.g. text. Move the mouse to the Linux desktop an...
"Cannot Complete Your Request" via Oauth after Upgrading NetScaler from 12.1 to 13.0
After ADC is upgraded from 12.1 to 13.0, the user keeps getting "Cannot Complete Your Request" when attempting to access resources through ADC with Oauth authentication. As a comparison, there is no issue accessing StoreFront directly in the intranet without Oauth...
Cybersecurity Is a Social, Policy, and Wicked Problem
Cybersecurity is a social and policy problem, not a scientific or technical problem. Cybersecurity is also a wicked problem. In a landmark 1973 article, Dilemmas in a General Theory of Planning , urban planners Horst W. J. Rittel and Melvin M. Webber described wicked problems in these terms: “The...
The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST controllers, related to deficiencies in the validation of user-input data, allows attackers to execute cross-site scripting (XSS) attacks.
The vulnerability of Rockwell Automation’s ArmorStart ST engine controllers is related to deficiencies in the validation of user input data. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting XSS attacks remotely...
CVE-2023-3312
A vulnerability was found in drivers/cpufreq/qcom-cpufreq-hw.c in cpufreq subsystem in the Linux Kernel. This flaw, during device unbind will lead to double release problem leading to denial of service...
CVE-2023-3312
A vulnerability was found in drivers/cpufreq/qcom-cpufreq-hw.c in cpufreq subsystem in the Linux Kernel. This flaw, during device unbind will lead to double release problem leading to denial of service...
SUSE: Security Advisory (SUSE-SU-2023:2530-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-30595
CVE-2023-30595 (Grav CMS) involves a server-side template injection in GravExtension.filterFilter() for Grav
CVE-2023-30596
Summary: CVE-2023-30596 is a Grav CMS vulnerability (SSTI) in Grav
Google Android Encryption Problem Vulnerability (CNVD-2023-53159)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an encryption problem vulnerability that can be exploited by an attacker to cause elevated privileges on paired devices...
SUSE-SU-2023:2530-1 Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: - CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module bsc1212143. Bug fixes: - Fixed build problem with grpc 1.54 bsc1210695...
Ouroboros is Unsound
Summary Ouroboros has a soundness problem, but a fix has been implemented in 0.16.0. More details: In 0.15.0, Ouroboros works internally by creating a struct where all uses of 'this are replaced by 'static. However, a recent addition to Miri checks that references passed to functions are valid...
RUSTSEC-2023-0042 Ouroboros is Unsound
Summary Ouroboros has a soundness problem, but a fix has been implemented in 0.16.0. More details: In 0.15.0, Ouroboros works internally by creating a struct where all uses of 'this are replaced by 'static. However, a recent addition to Miri checks that references passed to functions are valid...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2023-2193)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : kernel (EulerOS-SA-2023-2193)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack...
Ubuntu 16.04 ESM : Linux kernel vulnerabilities (USN-6149-1)
The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6149-1 advisory. Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests,...