3484 matches found
GHSA-5QG4-5CPF-4R9P vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu-melange, linux-qemu...
CVE-2023-4010 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu-melange, linux-qemu...
CVE-2023-3397 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu-melange, linux-qemu...
GHSA-4H2P-5CF9-5J8F vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu-melange, linux-qemu...
CVE-2022-2308 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu-melange, linux-qemu...
CVE-2018-10902 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu-melange, linux-qemu...
CVE-2023-39180 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu-melange, linux-qemu...
GHSA-9CVC-H2W8-PHRP AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value
Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement has been implemented in th...
Improper Validation of Syntactic Correctness of Input
Overview Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input in the region input field. An attacker can cause AWS API calls to be routed to unintended or non-existent hosts by supplying an invalid value. Remediation Upgrade AWSSDK.Core to...
CVE-2023-43116
A symbolic link following vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user to change ownership of arbitrary directories via the PIPELINEPATH variable in the fix-buildkite-agent-builds-permissions script...
CVE-2022-38299
An issue in the Elasticsearch plugin of Appsmith v1.7.11 allows attackers to connect disallowed hosts to the AWS/GCP internal metadata endpoint...
CVE-2019-2907
Vulnerability in the Oracle Web Services product of Oracle Fusion Middleware component: SOAP with Attachments API for Java. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web...
CVE-2023-50733
A Server-Side Request Forgery SSRF vulnerability has been identified in the Web Services feature of newer Lexmark devices...
CVE-2021-41017
Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow a remote authenticated attacker to execute arbitrary code or commands via specifically crafted HTTP requests...
CVE-2021-2433
Vulnerability in the Essbase Analytic Provider Services product of Oracle Essbase component: Web Services. Supported versions that are affected are 11.1.2.4 and 21.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Essbase Analytic...
Photon OS 5.0: Aws PHSA-2026-5.0-0732
An update of the aws package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0732. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid28250...
Photon OS 4.0: Aws PHSA-2026-4.0-0942
An update of the aws package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0942. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid28250...
GHSA-PC9J-5V36-2MWW AWS SDK for Swift adopted defense in depth enhancement for region parameter value
CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...
Improper Validation of Syntactic Correctness of Input
Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input in the region input field. An attacker can cause AWS API calls to be routed to unintended or non-existent hosts by supplying an invalid...
