468 matches found
CVE-2022-21555
Vulnerability in the MySQL Shell for VS Code product of Oracle MySQL component: Shell: GUI. Supported versions that are affected are 1.1.8 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Shell for VS Code executes to...
CVE-2022-21555
CVE-2022-21555 affects MySQL Shell for VS Code (Shell: GUI) with affected versions 1.1.8 and earlier. The connected IBM Security Guardium bulletin lists the CVE-2022-21555 entry among several Oracle MySQL vulnerabilities and describes the impact as low confidentiality, low integrity, and no avail...
PT-2022-3832 · Oracle · Mysql Shell For Vs Code
Name of the Vulnerable Software and Affected Versions: MySQL Shell for VS Code versions 1.1.8 and prior Description: The issue is related to insecure privilege management in the MySQL Shell for VS Code component. It allows an attacker to gain read, modify, or delete access to data. The...
CVE-2022-21555: Undefined Security Weakness
Vulnerability in the MySQL Shell for VS Code product of Oracle MySQL component: Shell: GUI. Supported versions that are affected are 1.1.8 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Shell for VS Code executes to...
CVE-2022-29209
TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the macros that TensorFlow uses for writing assertions e.g., CHECKLT, CHECKGT, etc. have an incorrect logic when comparing sizet and int values. Due to type conversion rules, several of t...
PT-2022-19461
Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.9.0 TensorFlow versions prior to 2.8.1 TensorFlow versions prior to 2.7.2 TensorFlow versions prior to 2.6.4 Description TensorFlow is an open source platform for machine learning. The macros that TensorFlow uses...
vs-racing.com Cross Site Scripting vulnerability OBB-2597788
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Function name doesn't match the interface
Lines of code Vulnerability details Impact StakedCitadelVester contract doesn't support the IVesting interface, so the withdrawal of Citadel from the StakedCitadel contract will be impossible because the IVestingvesting.setupVestingmsg.sender, amount, block.timestamp; call will revert because the...
CVE-2021-26600: Access of Resource Using Incompatible Type
ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass != instead of !==...
CVE-2021-32039
Summary of CVE-2021-32039 : The MongoDB Extension for VS Code stores credentials locally in a binary file in clear text when a user has appropriate file access, affecting all versions up to 0.7.0. This can enable attackers with local access to perform unauthorized actions using these credentials....
CVE-2021-32039
Users with appropriate file access may be able to access unencrypted user credentials saved by MongoDB Extension for VS Code in a binary file. These credentials may be used by malicious attackers to perform unauthorized actions. This vulnerability affects all MongoDB Extension for VS Code includi...
CVE-2021-32039 MongoDB Extension for VS Code may unexpectedly store credentials locally in clear text
Users with appropriate file access may be able to access unencrypted user credentials saved by MongoDB Extension for VS Code in a binary file. These credentials may be used by malicious attackers to perform unauthorized actions. This vulnerability affects all MongoDB Extension for VS Code includi...
CVE-2021-32039 MongoDB Extension for VS Code may unexpectedly store credentials locally in clear text
Users with appropriate file access may be able to access unencrypted user credentials saved by MongoDB Extension for VS Code in a binary file. These credentials may be used by malicious attackers to perform unauthorized actions. This vulnerability affects all MongoDB Extension for VS Code includi...
CVE-2021-32039: Insufficiently Protected Credentials
Users with appropriate file access may be able to access unencrypted user credentials saved by MongoDB Extension for VS Code in a binary file. These credentials may be used by malicious attackers to perform unauthorized actions. This vulnerability affects all MongoDB Extension for VS Code includi...
MongoDB Extension for VS Code may unexpectedly store credentials locally in clear text
Users with appropriate file access may be able to access unencrypted user credentials saved by MongoDB Extension for VS Code in a binary file. These credentials may be used by malicious attackers to perform unauthorized actions. This vulnerability affects all MongoDB Extension for VS Code includi...
PT-2021-27204
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.15.10 Description A bug has been identified in the Linux Kernel, specifically an IS ERR vs NULL issue. The actual impact and potential for exploitation have not been confirmed. Recommendations For Linux...
PT-2021-27164
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.88 Description The issue is related to an IS ERR vs NULL bug. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.88, update to versi...
Military’s RFID Tracking of Guns May Endanger Troops
Reports that the military has started outfitting firearms with RFID tags for tracking have raised security alarms. The concern: What if the enemy uses the tags to track soldiers on the battlefield? The Department of Defense, the Marines and the Navy have already rejected the RFID tagging tech for...
@web-desktop-environment/development-edition-server (>=0.0.4, <=1.0.2), @web-desktop-environment/pack-dev (>=1.0.1-alpha.1, <=1.0.2) potentially affected by CVE-2021-3810 via code-server (>=3.9.2, <=3.9.3)
code-server NPM version =3.9.2, =0.0.4, =1.0.1-alpha.1, =1.0.2 Source cves: CVE-2021-3810 Source advisory: OSV:GHSA-49X3-8228-3W3M...