31440 matches found
PT-2023-28912 · Apache · Apache Inlong
Name of the Vulnerable Software and Affected Versions: Apache InLong versions 1.4.0 through 1.8.0 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This vulnerability allows some sensitive parameter checks to be bypassed, including...
ALSA-2023:5709 Important: dotnet7.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 7.0 to SDK 7.0.112 and Runtime 7.0.12...
CVE-2023-25675 affecting package tensorflow for versions less than 2.11.1-1
CVE-2023-25675 affecting package tensorflow for versions less than 2.11.1-1. A patched version of the package is available...
CVE-2023-25671 affecting package tensorflow for versions less than 2.11.1-1
CVE-2023-25671 affecting package tensorflow for versions less than 2.11.1-1. A patched version of the package is available...
CVE-2023-25669 affecting package tensorflow for versions less than 2.11.1-1
CVE-2023-25669 affecting package tensorflow for versions less than 2.11.1-1. A patched version of the package is available...
CVE-2023-25672 affecting package tensorflow for versions less than 2.11.1-1
CVE-2023-25672 affecting package tensorflow for versions less than 2.11.1-1. A patched version of the package is available...
SUSE CVE-2023-45143
Undici is an HTTP/1.1 client written from scratch for Node.js. Prior to version 5.26.2, Undici already cleared Authorization headers on cross-origin redirects, but did not clear Cookie headers. By design, cookie headers are forbidden request headers, disallowing them to be set in...
CVE-2023-39960 Nextcloud Server has improper restriction of excessive authentication attempts on WebDAV endpoint
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server starting with 25.0.0 and prior to 25.09 and 26.04; as well as Nextcloud Enterprise Server starting with 22.0.0 and prior to 22.2.10.14, 23.0.12.9, 24.0.12.5, 25.0.9, and 26.0.4; missing...
Cisco Emergency Responder Static Credentials (cisco-sa-cer-priv-esc-B9t3hqk9)
According to its self-reported version, Cisco Emergency Responder Static Credentials is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...
F5 Networks BIG-IP : BIG-IP iControl REST Privilege Escalation (K26910459)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.0 / 16.1.4 / 15.1.9. It is, therefore, affected by a vulnerability as referenced in the K26910459 advisory. The BIG-IP and BIG-IQ systems do not encrypt some sensitive information written to Database DB variables. Not...
F5 Networks BIG-IP : BIG-IP Edge Client for macOS Privilege Escalation (K000136185)
The version of F5 Networks BIG-IP installed on the remote macOS host is prior or equal to 17.1.0 / 16.1.4 / 15.1.10 / 14.1.5 / 13.1.5. It is, therefore, affected by a vulnerability as referenced in the K000136185 advisory. The BIG-IP Edge Client Installer on macOS does not follow best practices f...
F5 Networks BIG-IP : BIG-IP and BIG-IQ DB Variable Vulnerability (K20850144)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.0 / 16.1.4 / 15.1.9. It is, therefore, affected by a vulnerability as referenced in the K20850144 advisory. The BIG-IP and BIG-IQ systems do not encrypt some sensitive information written to Database DB variables. Not...
F5 Networks BIG-IP TCP profile vulnerability (K000134652)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.0 / 16.1.4 / 15.1.9. It is, therefore, affected by a vulnerability as referenced in the K000134652 advisory. When TCP Verified Accept is enabled on a TCP profile that is configured on a virtual server, undisclosed...
F5 Networks BIG-IP APM Guided Configuration Information Disclosure (K47756555)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.0 / 16.1.4 / 15.1.8. It is, therefore, affected by a vulnerability as referenced in the K47756555 advisory. When BIG-IP APM Guided Configuration is configured, undisclosed sensitive information may be logged in the...
F5 Networks BIG-IP : BIG-IP DNS TSIG Key Leakage (K98334513)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.0 / 16.1.4 / 15.1.9. It is, therefore, affected by a vulnerability as referenced in the K98334513 advisory. When a BIG-IP DNS or BIG-IP LTM system is enabled with the DNS Services license, and a TSIG key is created, t...
F5 Networks BIG-IP IPsec DoS (K000132420)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.0 / 16.1.4 / 15.1.9. It is, therefore, affected by a vulnerability as referenced in the K000132420 advisory. When TCP Verified Accept is enabled on a TCP profile that is configured on a virtual server, undisclosed...
CVE-2023-44487 affecting package moby-cli for versions less than 20.10.25-2
CVE-2023-44487 affecting package moby-cli for versions less than 20.10.25-2. A patched version of the package is available...
CVE-2023-39325 affecting package moby-containerd-cc for versions less than 1.7.1-5
CVE-2023-39325 affecting package moby-containerd-cc for versions less than 1.7.1-5. A patched version of the package is available...