7 matches found
CVE-2023-50936
IBM PowerSC 1.3, 2.0, and 2.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 275116...
EUVD-2025-23069
Malicious code in bioql PyPI...
SurrealDB bypass of deny-net flags via redirect results in server-side request forgery (SSRF)
SurrealDB offers http functions that can access external network endpoints. A typical, albeit not recommended configuration would be to start SurrealDB with all network connections allowed with the exception of a deny list. For example, surreal start --allow-net --deny-net 10.0.0.0/8 will allow a...
Randomly Failure when Launching Virtual Desktop through NetScaler Gateway
Randomly, end user would report Virtual Desktop launching failure issue via NetScaler Gateway...
SUSE-SU-2019:2601-1 Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP2)
This update for the Linux Kernel 4.4.121-92120 fixes several issues. The following security issues were fixed: - CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged...
Unable to Enroll with SecureHub - Error: "Invalid Credentials"
Users unable to enroll device in XenMobile Error: "Invalid Credentials" Other users are able to enroll on the affected device, however the affected user is unable to enroll...
SUSE-SU-2018:0272-1 Security update for the Linux Kernel (Live Patch 12 for SLE 12 SP2)
This update for the Linux Kernel 4.4.74-9235 fixes several issues. The following security issues were fixed: - CVE-2017-17712: The rawsendmsg function had a race condition that lead to uninitialized stack pointer usage. This allowed a local user to execute code and gain privileges bsc1073230. -...