[SECURITY] Fedora 36 Update: redis-6.2.7-1.fc36

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

CVE-2022-28274

Adobe Photoshop 22.5.6 and earlier, and 23.2.2 and earlier, are affected by an out-of-bounds read vulnerability in parsing crafted files that could allow code execution in the user’s context. Exploitation requires user interaction (victim must open a malicious file). The issue is listed under APS...

CVE-2021-39027

IBM Guardium Data Encryption GDE 4.0.0 and 5.0.0 prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved. IBM X-Force ID: 213865...

Code injection

IBM Guardium Data Encryption GDE 4.0.0 and 5.0.0 prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved. IBM X-Force ID: 213865...

The Operational Structure of Bitcoin

By Owais Sultan Launched in 2009, Bitcoin was the first-ever digital coin that marked the beginning of a cryptocurrency era. It… This is a post from HackRead.com Read the original post: The Operational Structure of Bitcoin...

CVE-2021-38443 Eclipse CycloneDDS Improper Handling of Syntactically Invalid Structure

Eclipse CycloneDDS versions prior to 0.8.0 improperly handle invalid structures, which may allow an attacker to write arbitrary values in the XML parser...

The vulnerability of the information system openSIS, related to the failure to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries through the /opensis/modules/grades/InputFinalGrades.php parameter...

Apple macOS SCPT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AppleScrip...

Apple macOS SCPT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AppleScrip...

The vulnerability of the QuerySet.explain() function implementation in the Django web application framework allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the QuerySet.explain function implementation in the Django web application framework is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the sql/sql_class.cc component in the MariaDB database management system allows a hacker to cause a service failure.

The vulnerability of the sql/sqlclass.cc component in the MariaDB database management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2022-9313)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9313 advisory. - netfilter: nftables: initialize registers in nftdochain Pablo Neira Ayuso Orabug: 34012925 CVE-2022-1016 - btrfs: unlock newly allocated extent buffe...

CVE-2016-20014

In pamtacplus.c in pamtacplus before 1.4.1, pamsmacctmgmt does not zero out the arep data structure...

UBUNTU-CVE-2016-20014

In pamtacplus.c in pamtacplus before 1.4.1, pamsmacctmgmt does not zero out the arep data structure...

Code injection

In pamtacplus.c in pamtacplus before 1.4.1, pamsmacctmgmt does not zero out the arep data structure...

CVE-2016-20014

In pamtacplus.c in pamtacplus before 1.4.1, pamsmacctmgmt does not zero out the arep data structure...

CVE-2016-20014

Removed by vendor...

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for managing software tools used to create reports for Cisco Security Manager’s deployed security solutions exists due to the lack of protective measures taken for the web page structure. Exploiting this vulnerability allows a malicious actor to perform...

pam_tacplus 安全漏洞

pamtacplus is a PAM module for authenticating users via TACACS + Terminal Access Controller Access Control System by the individual developer Paweł Krawczyk in the UK. A security vulnerability exists in pamtacplus before 1.4.1, which stems from the fact that pamsmacctmgmt does not zero out the ar...

The vulnerability of Cisco Webex Meetings’ software web interface stems from the lack of protective measures for the website structure. This allows attackers to disclose protected information, alter the appearance of the website, and perform phishing attacks as well as “drive-by” attacks.

The vulnerability of Cisco Webex Meetings’ software web interface exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to disclose protected information, alter the appearance of the website, and perform phishing attacks ...