727 matches found
This Week in Spring - October 25th, 2022
Hi, Spring fans! Welcome to another installment of This Week in Spring! When last we spoke, I was in Las Vegas, NV, for the JavaOne show. It was amazing! Im in sunny Singapore, then off to Malaysia and Thailand. Its the first time Ive been to any of these places since 2019! How good it is to be...
CVE-2022-32173
In OrchardCore rc1-11259 to v1.2.2 vulnerable to HTML injection, allow an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard that will affect admin users...
Appwrite 跨站脚本漏洞
Appwrite is Appwrite open source an end-to-end backend server . Used to package into a set of Docker microservices for web, mobile, native or backend applications . A cross-site scripting vulnerability exists in versions prior to Appwrite 1.0.0-RC1. No information about this vulnerability is...
PT-2022-6143 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions v6.0-rc1 through v6.0-rc3 Description: A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in the nvmet setup auth function, allows an attacker to perform a Pre-Auth Denial of Service DoS...
Design/Logic Flaw
A Floating point exception division-by-zero flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1 upstream...
CVE-2021-4216
A Floating point exception division-by-zero flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1 upstream...
CVE-2021-4216
A Floating point exception division-by-zero flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1 upstream...
CVE-2021-4216
A Floating point exception division-by-zero flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1 upstream...
CVE-2021-4216
A Floating point exception division-by-zero flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1 upstream...
PT-2022-11547 · Mupdf +2 · Mupdf +2
Name of the Vulnerable Software and Affected Versions: Mupdf versions prior to 1.20.0-rc1 Description: A Floating point exception division-by-zero flaw was found in Mupdf for zero width pages in muraster.c. Recommendations: For versions prior to 1.20.0-rc1, update to Mupdf-1.20.0-rc1 or later to...
open62541 安全漏洞
open62541 is an application software. An open source and free implementation of OPC UA OPC Unified Architecture, written in a common subset of the C99 and C++98 languages. A security vulnerability exists in open62541 versions prior to 1.2.5, 1.3-rc1, and 1.3.1, which stems from the lack of a limi...
Spring Shell 2.1.0-RC1 is now available
On behalf of the team and everyone who has contributed, Im happy to announce that Spring Shell 2.1.0-RC1 has been released and is now available from . Please see the release notes for more details. Thanks to all those who have contributed with issue reports and pull requests. How can you help?...
Improper Privilege Management
Overview katello is a package that adds Content and Subscription Management to Foreman Affected versions of this package are vulnerable to Improper Privilege Management due to not respecting filtering on Product Name when actions are performed via hammer using the repository id. Remediation Upgra...
Information Exposure
Overview katello is a package that adds Content and Subscription Management to Foreman Affected versions of this package are vulnerable to Information Exposure via an errata-related API. An authenticated user can expose internal IDs. This is caused by an incomplete fix for CVE-2016-3072...
CVE-2021-3981 affecting package grub2 2.06~rc1-7
CVE-2021-3981 affecting package grub2 2.06rc1-7. A patched version of the package is available...
Beanbag Review Board 跨站脚本漏洞
Beanbag Review Board is the U.S. Beanbag company's set of open source code review review tool. The tool includes a server-side program reveiwboard and client-side command line RBTools. A security vulnerability exists in Review Board version 3.0.20 and 4.0 RC1 and earlier versions, which can be...
CVE-2020-14311 affecting package grub2 for versions less than 2.06~rc1-7
CVE-2020-14311 affecting package grub2 for versions less than 2.06rc1-7. A patched version of the package is available...
CVE-2021-3418 affecting package grub2 for versions less than 2.06~rc1-7
CVE-2021-3418 affecting package grub2 for versions less than 2.06rc1-7. A patched version of the package is available...