8359 matches found
RLSA-2022:5834 Important: kernel-rt security and bug fix update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak CVE-2022-1012 kernel: a...
SUSE SLES15 Security Update : oracleasm (SUSE-SU-2022:2617-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2022:2617-1 advisory. This update of oracleasm fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581 Tenable has extracted...
SUSE SLES12 Security Update : drbd (SUSE-SU-2022:2622-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2022:2622-1 advisory. This update of drbd fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581 Tenable has extracted the...
RHEL 8 : kernel-rt (RHSA-2022:5834)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5834 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...
PT-2022-6315 · Asus · Asus Rt-Ax82U
Name of the Vulnerable Software and Affected Versions: Asus RT-AX82U version 3.0.0.4.386 49674-ge182230 Description: An authentication bypass issue exists in the get IFTTTTtoken.cgi functionality, allowing a specially-crafted HTTP request to lead to full administrative access to the device. An...
ASUS RT-AC56U Configuration Function Code Execution
The vulnerability of the configuration function of ASUS’ Wi-Fi router software, the RT-AC56U, is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
Moderate Photon OS Security Update - PHSA-2022-0425
Updates of 'linux-rt', 'linux-esx', 'linux-secure', 'linux', 'linux-aws' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2022-4.0-0214
Updates of 'linux-esx', 'libtiff', 'linux-aws', 'lua', 'ImageMagick', 'go', 'linux', 'linux-secure', 'linux-rt' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2022-0214
Updates of 'linux-esx', 'linux-aws', 'linux', 'linux-rt', 'linux-secure', 'go', 'libtiff', 'ImageMagick' packages of Photon OS have been released...
AlmaLinux 8 : kernel-rt (5565) (ALSA-2022:5565)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:5565 advisory. - kernel: race condition in perfeventopen leads to privilege escalation CVE-2022-1729 Note that Nessus has not tested for this issue but has instead relied only on...
RHEL 8 : kernel-rt (RHSA-2022:5633)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5633 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...
CVE-2022-25802
Best Practical Request Tracker RT before 4.4.6 and 5.x before 5.0.3 allows XSS via a crafted content type for an attachment...
CVE-2022-25800
Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool...
Server side request forgery (ssrf)
Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via Scripted Action tools...
CVE-2022-25803
The CVE-2022-25803 entry concerns Best Practical Request Tracker (RT) before 5.0.3, which is vulnerable to an Open Redirect via a ticket search. Public references note the issue as part of RT’s release notes for 5.0.3, indicating an in-product redirect vulnerability rather than a broader exploita...
CVE-2022-25802
CVE-2022-25802 details: Best Practical Request Tracker (RT) is vulnerable to a cross-site scripting (XSS) flaw when displaying an attachment, exploitable via a crafted content type. Affected versions are RT 4.4.0–4.4.6 and RT 5.x prior to 5.0.3. Public sources indicate upstream fixes/patches have...
CVE-2022-25801
Vulnerability : CVE-2022-25801 affects Best Practical RT for Incident Response (RTIR). Affected versions are RTIR < 4.0.3 and RTIR 5.x
CVE-2022-25801
Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via Scripted Action tools...
CVE-2022-25800
The vulnerability CVE-2022-25800 affects Best Practical RT for Incident Response (RTIR). Affected are RTIR versions before 4.0.3 and RTIR 5.x before 5.0.3, where the whois lookup tool is exploitable to perform server-side requests (SSRF). According to the initial details, the impact is high on co...