[SECURITY] Fedora 40 Update: plantuml-1.2024.3-3.fc40

PlantUML is a program allowing to draw UML diagrams, using a simple and human readable text description. It is extremely useful for code documenting, sketching project architecture during team conversations and so on. PlantUML supports the following diagram types - sequence diagram - use case...

[SECURITY] Fedora 40 Update: lucene-9.9.2-2.fc40

Apache Lucene is a high-performance, full-featured text search engine library written entirely in Java. It is a technology suitable for nearly any application that requires full-text search, especially cross-platform...

[SECURITY] Fedora 40 Update: jaxb-stax-ex-2.1.0-8.fc40

This project contains a few extensions to complement JSR-173 StAX API in the following areas: - Enable parser instance reuse which is important in the high-performance environment like Eclipse Implementation of JAXB and Eclipse Metro - Improve the support for reading from non-text XML infoset, su...

[SECURITY] Fedora 40 Update: java-diff-utils-4.12-7.fc40

Diff Utils library is an OpenSource library for performing the comparison / d iff operations between texts or some kind of data: computing diffs, applying patches, genera ting unified diffs or parsing them, generating diff output for easy future displaying lik e side-by-side view and so on...

[SECURITY] Fedora 40 Update: jakarta-oro-2.0.8-44.fc40

The Jakarta-ORO Java classes are a set of text-processing Java classes that provide Perl5 compatible regular expressions, AWK-like regular expressions, glob expressions, and utility classes for performing substitutions, splits, filtering filenames, etc. This library is the successor to the...

[SECURITY] Fedora 40 Update: icu4j-74.2-4.fc40

The International Components for Unicode ICU library provides robust and full-featured Unicode services on a wide variety of platforms. ICU supports the most current version of the Unicode standard, and provides support for supplementary characters needed for GB 18030 repertoire support. Java...

[SECURITY] Fedora 40 Update: apache-commons-text-1.10.0-6.fc40

The Commons Text library provides additions to the standard JDK's text handli ng. Our goal is to provide a consistent set of tools for processing text generally from computing distances between Strings to being able to efficiently do Stri ng escaping of various types...

PT-2024-13448

Name of the Vulnerable Software and Affected Versions Cypress Solutions CTM-200 versions 2.7.1.5600 and below Description The issue is related to an OS command injection vulnerability. This vulnerability can be exploited via the cli text parameter. Recommendations For versions 2.7.1.5600 and belo...

Cypress Solutions CTM-200 Security Vulnerability

The Cypress Solutions CTM-200 is a wireless gateway from Cypress Solutions. A security vulnerability exists in Cypress Solutions CTM-200 v2.7.1.5600 and earlier versions that stems from an operating system command injection vulnerability via the clitext parameter...

SUSE SLES12 Security Update : vim (SUSE-SU-2024:0783-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0783-1 advisory. - CVE-2023-48231: Fixed Use-After-Free in winclose bsc1217316. - CVE-2023-48232: Fixed Floating point Exception in...

PT-2024-19737 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.4 iOS versions prior to 17.4 iPadOS versions prior to 17.4 Description: A privacy issue was addressed by not logging contents of text fields, which could allow an app to view Mail data. Recommendations: For...

CVE-2024-20292

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

CVE-2024-20292

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

Input validation

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

CVE-2024-20292

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

CVE-2024-20292

Cisco Duo Authentication for Windows Logon and RDP contains a local, authenticated-information disclosure vulnerability in its logging component. The issue stems from improper storage of an unencrypted registry key in logs, allowing a local attacker to read sensitive data in clear text on the aff...

Cisco Duo Authentication for Windows Logon and RDP Information Disclosure Vulnerability

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

BIT-GITLAB-2021-22206

An issue has been discovered in GitLab affecting all versions starting from 11.6. Pull mirror credentials are exposed that allows other maintainers to be able to view the credentials in plain-text,...

BIT-GITLAB-2022-1510

An issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly handling malicious text in the CI Editor and CI Pipeline details page allowing t...

BIT-TYPO3-2021-32767

TYPO3 is an open source PHP based web content management system. In versions 9.0.0 through 9.5.27, 10.0.0 through 10.4.17, and 11.0.0 through 11.3.0, user credentials may been logged as plain-text. This occurs when explicitly using log level debug, which is not the default configuration. TYPO3...