3397 matches found
PT-2022-35273 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue is related to the validation termination record after EXTRA CONTEXT in the kselftest/arm64 component. The actual impact and attack plausibility have not yet been proven...
PT-2022-37526 · Vsftpd · Vsftpd
Name of the Vulnerable Software and Affected Versions: vsftpd affected versions not specified Description: The issue concerns the removal of unsupported systemd hardening options. No information is provided about the estimated number of potentially affected devices or real-world incidents where...
PT-2022-14613 · Unknown · Android Soc
Name of the Vulnerable Software and Affected Versions: Android SoC versions affected versions not specified Description: The issue concerns Android SoC. No specific details about the nature of the problem or its potential impact are provided in the available information. Recommendations: At the...
Security Bulletin: Multiple vulnerabilities in the Golang language affect IBM Event Streams
Summary This security vulnerability affects Golang that is used by the IBM Event Streams CLI component Vulnerability Details CVEID: CVE-2021-44716 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by an uncontrolled memory consumption in the header canonicalization cache in...
GHSA-GM5Q-2CX5-WR2J Joomla! Open Redirect vulnerability
Unspecified vulnerability in Joomla! before 1.5.4 has unknown impact and attack vectors related to a "User Redirect Spam fix," possibly an open redirect vulnerability...
PT-2022-13115 · Unknown · Calibre-Web
Name of the Vulnerable Software and Affected Versions: calibreweb versions prior to 0.6.16 Description: The issue is related to a Server-Side Request Forgery SSRF in calibreweb. This allows an attacker to forge requests from the server to other services. No information is provided about the...
PT-2022-13058
Name of the Vulnerable Software and Affected Versions corenlp affected versions not specified Description The issue is related to Improper Restriction of XML External Entity Reference. No information is provided about the estimated number of potentially affected devices or real-world incidents...
CVE-2013-4108
Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors...
Design/Logic Flaw
Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors...
CVE-2013-4108
Technical details about CVE-2013-4108 are not publicly available in the provided documents; no affected products, vectors, or fixes are specified. Monitor for updates from official advisories.
CVE-2008-1474
Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and attack vectors, some of which may be related to cross-site scripting XSS...
CVE-2009-0939
Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0...
PT-2022-18250 · Unknown +1 · Gpac Mp4Box +1
Name of the Vulnerable Software and Affected Versions: GPAC mp4box version 1.1.0-DEV-rev1663-g881c6a94a-master Description: The issue is related to an Integer Overflow. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents...
Security Bulletin: IBM Content Collector for Email affected by vulnerability due to WebSphere Application Server having insecure permissions when custom start up scripts are used
Summary IBM Content Collector for Email is affected by vulnerability due to WebSphere Application Server having insecure permissions when custom start up scripts are used. WAS might create files using the default permissions instead of the customized permissions, due to which a local attacker cou...
CVE-2017-1699
IBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it creates. A local attacker could exploit this vulnerability to modify or delete data contained in the files with an unknown impact. IBM X-Force ID: 134391...
DEBIAN-CVE-2015-5206
Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5168...
UBUNTU-CVE-2015-5168
Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5206...
CVE-2017-7278
Unspecified vulnerability in ASSA ABLOY APTUS Styra Porttelefonkort 4400 before A2 has unknown impact and attack vectors...