AlmaLinux 9 : python3.9 (ALSA-2022:7323)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7323 advisory. - A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using inttext, a system could take 50ms to parse an int...

Oracle Linux 9 : python3.9 (ELSA-2022-7323)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7323 advisory. - Security fix for CVE-2020-10735 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

CVE-2022-27586

Password recovery vulnerability in SICK SIM1004 Partnumber 1098148 with firmware version = 2.0.0 as soon as possible available in SICK Support Portal...

GLSA-202210-31 : OpenEXR: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-31 OpenEXR: Multiple Vulnerabilities - A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. T...

SUSE SLES12 Security Update : openjpeg2 (SUSE-SU-2022:3801-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3801-1 advisory. - CVE-2018-21010: Fixed heap buffer overflow in colorapplyiccprofile in bin/common/color.c bsc1149789. - CVE-2020-27824: Fixed OOB...

KLA20196 DoS vulnerability in Opera

Type confusion vulnerability was found in Opera. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Opera 92.0.4561.33 Stable update Related products Opera CVE list CVE-2022-3723 critical Solution Update to the latest version Download Opera Impacts DoS...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : openjpeg2 (SUSE-SU-2022:3802-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3802-1 advisory. - CVE-2018-20846: Fixed OOB read in pinextlrcp, pinextrlcp, pinextrpcl, pinextpcrl, pinextrpcl,...

SUSE SLED15: buildah / libgpg-error-devel / libgpg-error-devel-32bit / etc (SUSE-SU-2022:3766-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3766-1 advisory. - CVE-2021-20206: Fixed an issue in libcni that could allow an attacker to execute arbitrary...

Important: golang-github-gorilla-context

Issue Overview: 2023-05-11: CVE-2022-1996 has changed status to NOT AFFECTED for this package and has been removed from this advisory. A flaw was found in golang. The HTTP/1 client accepted invalid Transfer-Encoding headers indicating "chunked" encoding. This issue could allow request smuggling,...

Important: golang-github-syndtr-gocapability

Issue Overview: 2023-05-11: CVE-2022-1996 has changed status to NOT AFFECTED for this package and has been removed from this advisory. A flaw was found in golang. The HTTP/1 client accepted invalid Transfer-Encoding headers indicating "chunked" encoding. This issue could allow request smuggling,...

Linux Kerne code issue vulnerability

The Linux Kernel is the kernel used by the Linux Foundation's open source operating system Linux, which is vulnerable. A local attacker could exploit this vulnerability to cause a system crash, which could affect system availability...

CVE-2022-41582

The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability...

CVE-2022-41582

The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability...

Design/Logic Flaw

The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability...

PT-2022-25956 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The security module has configuration defects. Successful exploitation of this issue may affect system availability. Recommendations: At the moment, there is no information about a...

CVE-2022-41582

The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability...

CVE-2022-41582

The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability...

PT-2022-25950 · Kernel · Kernel

Name of the Vulnerable Software and Affected Versions: Kernel affected versions not specified Description: The issue is related to the kernel server not verifying the length of the data transferred in the user space. This can lead to an out-of-bounds read in the kernel, affecting device...

Huawei EulerOS: Security Advisory for xorg-x11-server (EulerOS-SA-2022-2596)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ruby: Regular expression denial of service vulnerability of Date parsing methods

A flaw was found in ruby, where the date object was found to be vulnerable to a regular expression denial of service ReDoS during the parsing of dates. This flaw allows an attacker to hang a ruby application by providing a specially crafted date string. The highest threat to this vulnerability is...