757 matches found
PT-2023-36177 · Unknown · Terraform-Provider-Null
Name of the Vulnerable Software and Affected Versions: terraform-provider-null affected versions not specified Description: The issue is related to a security release in Go 1.19, which required a rebuild of the terraform-provider-null package. Recommendations: At the moment, there is no informati...
SUSE-SU-2023:2253-1 Security update for terraform-provider-aws
This update of terraform-provider-aws fixes the following issues: - rebuild the package with the go 1.19 security release bsc1200441 bsc1209658...
SUSE-SU-2023:2212-1 Security update for prometheus-sap_host_exporter
This update of prometheus-saphostexporter fixes the following issues: - rebuild the package with the go 1.19 security release bsc1200441 bsc1209658...
PT-2023-36170 · Unknown +1 · Prometheus-Sap Host Exporter +1
Name of the Vulnerable Software and Affected Versions: prometheus-sap host exporter affected versions not specified Description: The issue is related to the go 1.19 security release. The estimated number of potentially affected devices worldwide is not available. There is no information about...
CVE-2023-21496
Active Debug Code vulnerability in ActivityManagerService prior to SMR May-2023 Release 1 allows attacker to use debug function via setting debug level...
GHSA-8849-CV9F-VCCM Access bypass in Drupal core
The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your...
Access bypass in Drupal core
The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your...
CVE-2023-31250
The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your...
Design/Logic Flaw
The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your...
CVE-2023-31250
The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your...
UBUNTU-CVE-2022-25275
In some situations, the Image module does not correctly check access to image files not stored in the standard public files directory when generating derivative images using the image styles system. Access to a non-public file is checked only if it is stored in the "private" file system. However,...
CVE-2022-25275
In some situations, the Image module does not correctly check access to image files not stored in the standard public files directory when generating derivative images using the image styles system. Access to a non-public file is checked only if it is stored in the "private" file system. However,...
CVE-2022-25275
In some situations, the Image module does not correctly check access to image files not stored in the standard public files directory when generating derivative images using the image styles system. Access to a non-public file is checked only if it is stored in the "private" file system. However,...
CVE-2023-31250 Drupal core - Moderately critical - Access bypass - SA-CORE-2023-005
The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your...
CVE-2022-25275
CVE-2022-25275 affects Drupal’s Image module, allowing access to non-public image files when generating derivatives if contributed file systems are used and insecure derivatives are enabled. The issue is mitigated by keeping $config['image.settings']['allow_insecure_derivatives'] (Drupal 9) or $c...
PT-2023-23267 · Drupal · Drupal
Name of the Vulnerable Software and Affected Versions: Drupal affected versions not specified Description: The file download facility does not sufficiently sanitize file paths in certain situations, potentially allowing users to access private files they should not have access to. Some sites may...
CVE-2022-25275
In some situations, the Image module does not correctly check access to image files not stored in the standard public files directory when generating derivative images using the image styles system. Access to a non-public file is checked only if it is stored in the "private" file system. However,...
CVE-2023-31250
Drupal core contains a path traversal vulnerability in the file download facility caused by insufficient sanitization of file paths. This can lead to unauthorized access to private files (high confidentiality impact). Affected: Drupal core; vulnerability tracked as SA-CORE-2023-005 (CVE-2023-3125...
