12616 matches found
PT-2022-24151 · Aruba · Aruba Edgeconnect Enterprise
Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise versions 9.2.1.0 and below Aruba EdgeConnect Enterprise versions 9.1.3.0 and below Aruba EdgeConnect Enterprise versions 9.0.7.0 and below Aruba EdgeConnect Enterprise versions 8.3.7.1 and below Description: A...
PT-2022-8170 · Digital Alert Systems · Dasdec
Name of the Vulnerable Software and Affected Versions: Digital Alert Systems' DASDEC software versions prior to 4.1 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the SSH username, username field of the login page, or via the HTTP host header. The inject...
Intel® AMT SDK, Intel® EMA and Intel® MC Advisory
Summary: A potential security vulnerability in the Intel® Active Management Technology AMT SDK, Intel® Endpoint Management Assistant EMA and Intel® Manageability Commander MC may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability...
PT-2022-24152 · Aruba · Aruba Edgeconnect Enterprise
Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Software versions prior to ECOS 9.2.1.0 Aruba EdgeConnect Enterprise Software versions prior to ECOS 9.1.3.0 Aruba EdgeConnect Enterprise Software versions prior to ECOS 9.0.7.0 Aruba EdgeConnect Enterprise Softwa...
PT-2022-25943 · Line · Line Client For Ios
Name of the Vulnerable Software and Affected Versions: LINE client for iOS versions prior to 12.17.0 Description: The issue is related to the LINE client for iOS, where sharing an invalid shared key of end-to-end encryption e2ee in a group chat might cause the application to crash. Recommendation...
PT-2022-5972 · 3S Smart Software Solutions · Codesys Development System V3
Name of the Vulnerable Software and Affected Versions: CODESYS Development System V3 versions prior to V3.5.18.40 Description: The issue is related to inadequate encryption strength, allowing an unauthenticated local attacker to access and manipulate the code of the encrypted boot application. It...
CVE-2022-41965 Opencast Authenticated OpenRedirect Vulnerability
Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 12.5, Opencast's Paella authentication page could be used to redirect to an arbitrary URL for authenticated users. The vulnerability allows attackers to redirect users to...
DLA-3209-1 ini4j - security update
Bulletin has no description...
MGASA-2022-0441 Updated xterm packages fix security vulnerability
xterm before patch 375 can enable an RCE under certain conditions...
Cybozu Remote Service vulnerable to Uncontrolled Resource Consumption
Overview Cybozu Remote Service provided by Cybozu, Inc. is vulnerable to uncontrolled resource consumption CWE-400. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of the solution through JVN. Impact A logged-in user may consume huge storage space, resulting to a...
CVE-2022-44748 Uploading workflows to KNIME Server may override arbitrary file system contents
A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Server since 4.3.0 can result in arbitrary files being overwritten on the server's file system. This vulnerability is also known as 'Zip-Slip'. An attacker can create a KNIME workflow that, when being uploaded, ca...
PT-2022-19857 · Mitsubishi · Motion Control Setting +1
Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric GX Works3 versions 1.000A through 1.087R Motion Control Setting GX Works3 related software versions 1.000A through 1.042U Description: The issue allows a remote unauthenticated attacker to disclose sensitive information. A...
SUSE-SU-2022:4201-1 Security update for nginx
This update for nginx fixes the following issues: - CVE-2021-3618: Fixed the ALPACA attack limiting the number of errors after which the connection is closed bsc1187685...
SUSE-SU-2022:4194-1 Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2022-3964: Fixed out of bounds read in updateblockinprevframe bsc1205388...
OPENSUSE-SU-2022:10212-1 Security update for xtrabackup
This update for xtrabackup fixes the following issues: Update xtrabackup to version 2.4.26: - CVE-2020-10997: Information exposure via cmd line output and table history boo1170644 - CVE-2020-29488: Changes in how absolute paths are handled boo1205581...
OPENSUSE-SU-2022:10211-1 Security update for Botan
This update for Botan fixes the following issues: - CVE-2022-43705: Fixed validation of embedded certificates was when checking OCSP responses boo1205509...
Typora fails to properly neutralize JavaScript code.
Overview Typora fails to properly neutralize JavaScript code CWE-116. Eiji Mori of Flatt Security Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact Opening a file with the affected product may lead to...
PT-2022-10889 · Hewlett Packard · Hp Command Center +1
Name of the Vulnerable Software and Affected Versions: OMEN Gaming Hub affected versions not specified HP Command Center affected versions not specified Description: A potential security issue has been identified that may allow escalation of privilege and/or denial of service. Recommendations: Fo...
MGASA-2022-0434 Updated varnish packages fix security vulnerability
An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1. An attacker may introduce characters through HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing the Varnish server to produce...