6426 matches found
container-tools:3.0 bug fix update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Bug Fixes: kubelet service fail to load EnvironmentFile due to SELinux denial BZ1999245 3.0-8.5.0: Under load, container failed to be created due to missing cgroup scope BZ1999264...
ALBA-2021:4093 container-tools:3.0 bug fix update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Bug Fixes: kubelet service fail to load EnvironmentFile due to SELinux denial BZ1999245 3.0-8.5.0: Under load, container failed to be created due to missing cgroup scope BZ1999264...
PT-2021-1197
Name of the Vulnerable Software and Affected Versions: container-tools versions 3.0 through 8.5.0 Description: The issue affects the container-tools module, which includes tools like podman, buildah, skopeo, and runc. It involves problems with container creation under load due to a missing cgroup...
Automation Enables Innovation in the Cloud
As public cloud adoption continues to grow year after year, we see more and more enterprises realizing the strategic advantage the cloud can provide to help deliver new and innovative products quicker, roll out new features with ease, and reach new customers. But along with those advantages comes...
CVE-2021-39881
In all versions of GitLab CE/EE since version 7.7, the application may let a malicious user create an OAuth client application with arbitrary scope names which may allow the malicious user to trick unsuspecting users to authorize the malicious client application using the spoofed scope name and...
CVE-2021-39881
In all versions of GitLab CE/EE since version 7.7, the application may let a malicious user create an OAuth client application with arbitrary scope names which may allow the malicious user to trick unsuspecting users to authorize the malicious client application using the spoofed scope name and...
Information disclosure
In all versions of GitLab CE/EE since version 7.7, the application may let a malicious user create an OAuth client application with arbitrary scope names which may allow the malicious user to trick unsuspecting users to authorize the malicious client application using the spoofed scope name and...
UBUNTU-CVE-2021-39881
In all versions of GitLab CE/EE since version 7.7, the application may let a malicious user create an OAuth client application with arbitrary scope names which may allow the malicious user to trick unsuspecting users to authorize the malicious client application using the spoofed scope name and...
CVE-2021-39881
In all versions of GitLab CE/EE since version 7.7, the application may let a malicious user create an OAuth client application with arbitrary scope names which may allow the malicious user to trick unsuspecting users to authorize the malicious client application using the spoofed scope name and...
CVE-2021-39881
In all versions of GitLab CE/EE since version 7.7, the application may let a malicious user create an OAuth client application with arbitrary scope names which may allow the malicious user to trick unsuspecting users to authorize the malicious client application using the spoofed scope name and...
PT-2021-22727 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 7.7 and later Description: The application may allow a malicious user to create an OAuth client application with arbitrary scope names, potentially tricking unsuspecting users into authorizing the malicious client...
CVE-2021-39881: Undefined Security Weakness
In all versions of GitLab CE/EE since version 7.7, the application may let a malicious user create an OAuth client application with arbitrary scope names which may allow the malicious user to trick unsuspecting users to authorize the malicious client application using the spoofed scope name and...
absolute difference is not calculated properly when a > b in MathUtils
Handle hack3r-0m Vulnerability details the difference is computed incorrectly when a b. As it only used in within1 function, scope narrows down to where differencea, b It is possible to decrease the denominator and increase the value of the numerator when calculating y using constants and input t...
Pollenisator - Collaborative Pentest Tool With Highly Customizable Tools
Pollenisator is a tool aiming to assist pentesters and auditor automating the use of some tools/scripts and keep track of them. Written in python 3 Provides a modelisation of "pentest objects" : Scope, Hosts, Ports, Commands, Tools etc. Tools/scripts are separated into 4 categories : wave,...
OSV-2021-1206 Stack-use-after-scope in uprv_stricmp_70
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38156 Crash type: Stack-use-after-scope READ 1 Crash state: uprvstricmp70 ulocimpgetLanguage70 canonicalize...
PT-2021-27750
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash has been reported, identified as a Stack-use-after-scope READ 1 issue. The crash involves several functions, including uprv stricmp 70, ulocimp...
icu:uloc_canonicalize_fuzzer: Stack-use-after-scope in uprv_stricmp_70
Project: https://github.com/unicode-org/icu.git Detailed Report: https://oss-fuzz.com/testcase?key=4509226890821632 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: uloccanonicalizefuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Stack-use-after-scope READ 1 Crash Address:...
Uninitialized memory use in generator
An issue was discovered in the generator crate before 0.6.18 for Rust. Uninitialized memory is used by Scope, done, and yield during API calls...
