expat is vulnerable to denial-of-service. The vulnerability exists in `storeAtts` function in `xmlparse.c` may lead to realloc misbehavior, allowing a malicious user to cause an application crash.Read ...
Continue ReadingJuly 01, 2023
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * rubygem-bundler: Dependencies ...
Continue ReadingJuly 01, 2023
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * rubygem-bundler: Dependencies ...
Continue ReadingJuly 01, 2023
## Releases * Ubuntu 16.04 ESM ## Packages * php7.0 - HTML-embedded scripting language interpreter It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use th ...
Continue ReadingJuly 01, 2023
A Command Injection in action_power.py in Cobbler prior to v2.6.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) password fields to the power ...
Continue ReadingJuly 01, 2023
Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. (This also affects ManageEngine Access Manager Plus before 4303 with ...
Continue ReadingJuly 01, 2023
etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 is vulnerable to an improper authentication issue when role-based access control (RBAC) is used and client-cert-auth is enabled. If an etcd cl ...
Continue ReadingJuly 01, 2023
graphql-java before 19.0, 18.3, and 17.4 is vulnerable to Denial of Service. An attacker send a malicious GraphQL query that consumes CPU resources. The fixed versions are 19.0, 18.3, and 17.4.Read Mo ...
Continue ReadingJuly 01, 2023
Back to Main