Amazon Corretto Java 16.x < 16.0.1.9.1 Multiple Vulnerabilities

The version of Amazon Corretto installed on the remote host is prior to 16 16.0.1.9.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-jdk16-2021-Apr-20 advisory. - core-libs/java.io CVE-2021-2161 - security-libs/java.security CVE-2021-2163 Note that Nessus ha...

Amazon Corretto Java 8.x < 8.282.08.1 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 8 8.282.08.1. It is, therefore, affected by a vulnerability as referenced in the corretto-8-2021-Jan-19 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Amazon Corretto Java 11.x < 11.0.9.11.2 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 11 11.0.9.11.2. It is, therefore, affected by a vulnerability as referenced in the corretto-11-2020-Oct-22 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reporte...

Amazon Corretto Java 16.x < 16.0.2.7.1 Multiple Vulnerabilities

The version of Amazon Corretto installed on the remote host is prior to 16 16.0.2.7.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-jdk16-2021-Jul-20 advisory. - core-libs/java.net CVE-2021-2341 - security-libs/java.security CVE-2021-2369 - hotspot/compiler...

IdeaRE RefTree Path Traversal Vulnerability

=============================================================================== title: IdeaRE RefTree Download Path Traversal product: IdeaRE RefTree =============================================================================== EXECUTIVE SUMMARY RefTree is a web application made for managing...

OpenEMR <= 6.0.0 Multiple Vulnerabilities

OpenEMR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr"; ifdescription...

GitLab 8.8.x - 10.1.5, 10.2.x - 10.2.5, 10.3.x - 10.3.3 Multiple Vulnerabilities

GitLab is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if description...

GitLab 11.1.0, 11.1.1 DoS Vulnerability

GitLab is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if...

PT-2022-16872 · Unknown · Grpc Swift

Name of the Vulnerable Software and Affected Versions: grpc-swift versions prior to 1.7.2 Description: The issue is a denial of service attack via a reachable assertion, caused by incorrect logic when handling GOAWAY frames. This attack requires minimal resources to construct and send the require...

GitLab 12.10.x - 14.6.4, 14.7.x - 14.7.3, 14.8.x - 14.8.1 Multiple Vulnerabilities

GitLab is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if description...

PT-2022-18711

Name of the Vulnerable Software and Affected Versions GNU GCC version 11.2 Description The issue in libiberty/rust-demangle.c allows stack consumption in demangle const. This can be demonstrated using nm-new. Recommendations For GNU GCC version 11.2, update to a newer version that contains a fix...

GitLab 11.2.x - 11.2.6, 11.3.x - 11.3.7, 11.4.x - 11.4.2 Multiple Vulnerabilities

GitLab is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if description...

PT-2022-17710 · Pnpm · Pnpm

Name of the Vulnerable Software and Affected Versions: PNPM versions 6.15.1 and below Description: The issue is related to an untrusted search path in PNPM, which can cause the application to behave in unexpected ways when users execute PNPM commands in a directory containing malicious content...

PT-2022-15601 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.4 iPadOS versions prior to 15.4 Description: A logic issue was addressed with improved restrictions, which could allow a malicious website to access information about the user and their devices. Recommendations: For i...

PT-2022-9364 · WordPress · Amp For Wp

Name of the Vulnerable Software and Affected Versions: AMP for WP – Accelerated Mobile Pages plugin versions = 1.0.77.31 Description: An Authenticated Stored Cross-Site Scripting XSS issue was found. This issue affects users with admin+ privileges. Recommendations: For AMP for WP – Accelerated...

PT-2022-15574 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.4 iPadOS versions prior to 15.4 Description: A person with physical access to an iOS device may be able to see sensitive information via keyboard suggestions. This issue was addressed with improved checks...

KLA12487 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free in Extensions can be exploited to cause denial of service or execute arbitrary...

PT-2022-18008 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.3 Description: A race condition was addressed with additional validation. This issue allows a malicious application to modify protected parts of the file system. Recommendations: For versions prior to 12.3, update t...

PT-2022-9560 · Unknown · Wpcargo Track & Trace

Name of the Vulnerable Software and Affected Versions: WPCargo Track & Trace versions prior to 6.9.0 Description: The issue allows unauthenticated attackers to write a PHP file anywhere on the web server, leading to remote code execution RCE. Recommendations: For versions prior to 6.9.0, update t...

PT-2022-1925

Name of the Vulnerable Software and Affected Versions Apache HTTP Server 2.4 versions 2.4.52 and prior versions Description The issue is related to an out-of-bounds write vulnerability in the mod sed module of Apache HTTP Server. This vulnerability allows an attacker to overwrite heap memory with...