1015 matches found
CVE-2021-39904: Incorrect Authorization
An Improper Access Control vulnerability in the GraphQL API in all versions of GitLab CE/EE starting from 13.1 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows a Merge Request creator to resolve discussions and apply suggestion...
Vulnerability fixed in OTRS
A vulnerability has been fixed in OTRS. A malicious person at remote user could potentially exploit the vulnerability to cause a Denial-of-Service. OTRS uses the deprecated npm module "resolve-url-loader" which is depends on the module "postcs" and is vulnerable to the ReDoS attack. OTRS has...
2021-10 Cumulative Update for Windows 11 for x64-based Systems (KB5006674)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2021-10 Cumulative Update for Windows Server, version 20H2 for x64-based Systems (KB5006670)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2021-10 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5006699)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2021-09 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5005565)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
exiv2 security update
0.27.3-3 - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS Resolves: bz1990355...
2021-08 Cumulative Update for Windows 10 Version 2004 for x86-based Systems (KB5005033)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2021-08 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5005039)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
CredPhish - A PowerShell Script Designed To Invoke Legitimate Credential Prompts And Exfiltrate Passwords Over DNS
CredPhish is a PowerShell script designed to invoke credential prompts and exfiltrate passwords. It relies on CredentialPicker to collect user passwords, Resolve-DnsName for DNS exfiltration, and Windows Defender's ConfigSecurityPolicy.exe to perform arbitrary GET requests. For a walkthrough, see...
2021-07 Cumulative Update for Windows Server, version 20H2 for x64-based Systems (KB5004237)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2021-07 Cumulative Update for Windows 10 Version 20H2 for x86-based Systems (KB5004237)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2021-07 Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB5004237)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2021-07 Cumulative Update for Windows 10 Version 20H2 for x86-based Systems (KB5004945)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2021-07 Cumulative Update for Windows Server, version 20H2 for x64-based Systems (KB5004945)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
PT-2024-11344
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs when mda resolve route is called more than once on the same rdma cm id. This can happen if cma query handler triggers the RDMA CM EVENT ROUTE ERROR flow, which puts...
libyang: invalid memory access in resolve_feature_value() when a if-feature is used inside a bit
An invalid memory access flaw occurs in libyang in the function resolvefeaturevalue when an if-feature statement is used inside a bit. Applications that use libyang to process untrusted input YANG files may crash...
CVE-2020-23915
An issue was discovered in cpp-peglib through v0.1.12. peg::resolveescapesequence in peglib.h has a heap-based buffer over-read...
PT-2021-10984 · Unknown +1 · Cpp-Peglib +1
Name of the Vulnerable Software and Affected Versions: cpp-peglib versions prior to 0.1.13 Description: An issue was discovered in the peg::resolve escape sequence function, located in peglib.h, which has a heap-based buffer over-read. Recommendations: For versions prior to 0.1.13, update to...
