4184 matches found
Security Bulletin: CSRF vulnerability in IBM Infosphere Guardium (CVE-2012-3309)
Abstract Security Bulletin: CSRF vulnerability in IBM Infosphere Guardium CVE-2012-3309 Content SUMMARY: Account creation panel is susceptible to cross site request forgery. VULNERABILITY DETAILS: CVE ID: CVE-2012-3309 DESCRIPTION: Account creation panel is susceptible to cross site request forge...
hartgersradiateuren.nl Cross Site Scripting vulnerability OBB-2941200
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-3080
A flaw was found in the Bind package, where the resolver can crash when stale cache and stale answers are enabled, option stale-answer-client-timeout is set to 0 and there is a stale CNAME in the cache for an incoming query. By sending specific queries to the resolver, an attacker can cause named...
DEBIAN-CVE-2022-3080
By sending specific queries to the resolver, an attacker can cause named to crash...
AZL-11000 CVE-2022-3080 affecting package bind for versions less than 9.16.33-1
By sending specific queries to the resolver, an attacker can cause named to crash...
CVE-2022-3080
By sending specific queries to the resolver, an attacker can cause named to crash...
CVE-2022-3080
By sending specific queries to the resolver, an attacker can cause named to crash...
CVE-2022-3080
By sending specific queries to the resolver, an attacker can cause named to crash...
CVE-2022-3080
By sending specific queries to the resolver, an attacker can cause named to crash...
CVE-2022-32912
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution...
USN-5617-1: Xen vulnerabilities
It was discovered that memory contents previously stored in microarchitectural special registers after RDRAND, RDSEED, and SGX EGETKEY read operations on Intel client and Xeon E3 processors may be briefly exposed to processes on the same or different processor cores. A local attacker could use th...
Exploit for Argument Injection in Atlassian Bitbucket
CVE-2022-36804-PoC Multithreaded exploit script for CVE-2022-3...
CVE-2022-35939
TensorFlow is an open source platform for machine learning. The ScatterNd function takes an input argument that determines the indices of of the output tensor. An input index greater than the output tensor or less than zero will either write content at the wrong index or trigger a crash. We have...
PT-2022-33380 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.14 through v5.19.3 Description: A potential memory leak issue exists in the rpc sysfs xprt state change function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
CVE-2022-38858
CVE-2022-38858 affects The MPlayer Project: buffer overflow in mov_build_index() inside libmpdemux/demux_mov.c, impacting mplayer and mencoder built from SVN-r38374-13.0.1. Connected sources corroborate multiple MPlayer vulnerabilities around the same codebase (buffer overflows, divide-by-zero, o...
zvykacky.cz Cross Site Scripting vulnerability OBB-2906274
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
istio security update
istio 1.13.7-1 - Added Oracle specific files for 1.13.7-1 olcne 1.5.5-1 - Upgrade Istio from 1.13.5 to 1.13.7 to resolve the CVE-2022-31045 1.5.4-3 - Fix bug in gen-certs-helper script to change permission of node.key to allow opc user to copy over 1.5.4-2 - Istio CVE-2022-31045, CVE-2022-29225,...
CVE-2022-32277
Squiz Matrix CMS 6.20 is vulnerable to an Insecure Direct Object Reference caused by failure to correctly validate authorization when submitting a request to change a user's contact details. NOTE: this is disputed by both the vendor and the original discoverer because it is a site-specific findin...
PT-2022-21201 · Squiz · Squiz Matrix Cms
Name of the Vulnerable Software and Affected Versions: Squiz Matrix CMS version 6.20 Description: The issue is caused by a failure to correctly validate authorization when submitting a request to change a user's contact details, leading to an Insecure Direct Object Reference. This allows...