Amazon Linux 2 : microcode_ctl (ALAS-2022-1800)

The version of microcodectl installed on the remote host is prior to 2.1-47. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1800 advisory. A flaw was found in hw. Processor optimization removal or modification of security-critical code for some IntelR processors may...

SUSE SLED15 / SLES15 Security Update : kernel-firmware (SUSE-SU-2022:1840-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1840-1 advisory. - Failure to flush the Translation Lookaside Buffer TLB of the I/O memory management unit IOMMU may lead an IO...

QEMU Buffer Overflow Vulnerability (CNVD-2023-80120)

QEMU Quick Emulator is a set of simulation processor software. The software is fast and cross-platform. QEMU suffers from a buffer overflow vulnerability that stems from an integer overflow in cursoralloc that could lead to a heap buffer overflow. A malicious privileged attacker can exploit this...

CVE-2020-9281

A cross-site scripting XSS vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted "protected" comment with the ckeprotected syntax...

SUSE SLES15 Security Update : kernel-firmware (SUSE-SU-2022:1751-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1751-1 advisory. Update AMD ucode and SEV firmware - CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376, CVE-2021-26375, CVE-2021-26378,...

PT-2022-3328 · Mariadb +9 · Mariadb +10

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.2 through 10.7 Description: The issue is related to a buffer overflow in the Item func in::cleanup/Item::cleanup processor function of the MariaDB database management system. This could allow a remote attacker to impact th...

SUSE-SU-2022:1744-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220510 release. bsc1199423 Updated to Intel CPU Microcode 20220419 release. bsc1198717 - CVE-2022-21151: Processor optimization removal or modification of security-critical code for some IntelR Processors may...

CVE-2022-28349

Arm Mali GPU Kernel Driver has a use-after-free: Midgard r28p0 through r29p0 before r30p0, Bifrost r17p0 through r23p0 before r24p0, and Valhall r19p0 through r23p0 before r24p0...

Arm Mali GPU Kernel Driver resource management error vulnerability

The Arm Mali GPU Kernel Driver is a driver for a graphics processor unit from Arm UK. A security vulnerability exists in the Arm Mali GPU Kernel Driver, which stems from a reuse-after-release vulnerability and affects the following products and versions: Midgard versions r28p0 through r29p0, prio...

PT-2022-36993

Name of the Vulnerable Software and Affected Versions OpenJPEG affected versions not specified Description A heap buffer overflow issue has been identified, which can cause a crash. The crash occurs due to a write operation. Technical details about the crash include the functions opj t1 allocate...

SUSE-SU-2022:1732-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220510 release. bsc1199423 Updated to Intel CPU Microcode 20220419 release. bsc1198717 - CVE-2022-21151: Processor optimization removal or modification of security-critical code for some IntelR Processors may...

HPESBHF04301 rev.1 - Certain HPE Edgeline Servers Using Intel Xeon Processors, INTEL-SA-00616, 2022.1 IPU - Intel Xeon Advisory, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant e910 Server Blade - Prior to H081.9404182022 HPE ProLiant e910t Server Blade - Prior to H081.9404182022 CVSS Scores: | CVE | CVSS Vector ...

HPESBHF04306 rev.1 - Certain HPE Moonshot/Edgeline Servers Using Intel Processors, INTEL-SA-00617, 2022.1 IPU - Intel Processor Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m710x Server Blade - Prior to H071.9604142022 HPE ProLiant m750 Server Blade - Prior to H091.5004152022 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- |...

CVE-2022-21151

A flaw was found in hw. Processor optimization removal or modification of security-critical code for some IntelR processors may potentially allow an authenticated user to enable information disclosure via local access. Mitigation Mitigation for this issue is either not available or the currently...

org.jenkins-ci.main:jenkins-test-harness (1.595), org.jenkins-ci.main:jenkins-war (1.595) +5 more potentially affected by CVE-2017-1000356 via org.jenkins-ci.main:jenkins-core (1.595)

org.jenkins-ci.main:jenkins-core MAVEN version 1.595 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.595 - org.jenkins-ci.main:jenkins-war 1.595 -...

Improper Restriction of XML External Entity Reference in Apache NiFi

Apache NiFi External XML Entity issue in SplitXML processor. Malicious XML content could cause information disclosure or remote code execution. The fix to disable external general entity parsing and disallow doctype declarations was applied on the Apache NiFi 1.6.0 release. Users running a prior...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (1.0.0), com.airbus-cyber-security.graylog:graylog-plugin-logging-alert (>=1.0.0, <=1.0.1) +6 more potentially affected by CVE-2018-11650 via org.graylog2:graylog2-server (>=2.0.0-alpha.1, <=2.4.3)

org.graylog2:graylog2-server MAVEN version =2.0.0-alpha.1, =1.0.0, =1.0.2, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.1.2, =2.2.0-alpha.1 Source cves: CVE-2018-11650 Source advisory: OSV:GHSA-H7G4-65MF-6MXH...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (1.0.0), com.airbus-cyber-security.graylog:graylog-plugin-logging-alert (>=1.0.0, <=1.0.1) +6 more potentially affected by CVE-2018-11650 via org.graylog2:graylog2-server (>=2.0.0-alpha.1, <=2.4.3)

org.graylog2:graylog2-server MAVEN version =2.0.0-alpha.1, =1.0.0, =1.0.2, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.1.2, =2.2.0-alpha.1 Source cves: CVE-2018-11650 Source advisory: GHSA-H7G4-65MF-6MXH...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (1.0.0), com.airbus-cyber-security.graylog:graylog-plugin-logging-alert (>=1.0.0, <=1.0.1) +6 more potentially affected by CVE-2018-14380 via org.graylog2:graylog2-server (>=2.0.0-alpha.1, <=2.4.5)

org.graylog2:graylog2-server MAVEN version =2.0.0-alpha.1, =1.0.0, =1.0.2, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.1.2, =2.2.0-alpha.1 Source cves: CVE-2018-14380 Source advisory: OSV:GHSA-38HF-XJMX-JRH8...

GHSA-W3J5-Q8F2-3CQQ Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat

A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13, 8.5.0 to 8.5.8, 8.0.0.RC1 to 8.0.39, 7.0.0 to 7.0.73 and 6.0.16 to 6.0.48 resulted in the current Processor object being added to the Processor cache multiple times. This in turn...