TLS hostname verification cannot be enabled in the Pulsar Broker's Java Client, the Pulsar Broker's Java Admin Client, the Pulsar WebSocket Proxy's Java Client, and the Pulsar Proxy's Admin Client lea ...
Continue ReadingSeptember 23, 2022
An issue has been found in PBC through 2022-8-27. A SEGV issue detected in the function pbc_wmessage_integer in src/wmessage.c:137.Read More ...
Continue ReadingSeptember 23, 2022
In JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged when using custom Perforce executableRead More ...
Continue ReadingSeptember 23, 2022
In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, the ...
Continue ReadingSeptember 23, 2022
A Reflected Cross-Site Scripting (XSS) vulnerability affects the Veritas Desktop Laptop Option (DLO) application login page (aka the DLOServer/restore/login.jsp URI). This affects versions before 9.8 ...
Continue ReadingSeptember 23, 2022
Veritas System Recovery (VSR) versions 18 and 21 store a network destination password in the Windows registry during configuration of the backup configuration. This vulnerability could provide a Windo ...
Continue ReadingSeptember 23, 2022
hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function.Read More ...
Continue ReadingSeptember 23, 2022
In 0.10.0 or older versions of Apache Pinot, Pinot query endpoint and realtime ingestion layer has a vulnerability in unprotected environments due to a groovy function support. In order to avoid this, ...
Continue ReadingSeptember 23, 2022
Back to Main