Security Bulletin: IBM WebSphere Application Server Liberty is vulnerable to a denial of service due to Google protobuf-java (CVE-2022-3171, CVE-2022-3509)

## Summary There is a vulnerability in the Google protobuf-java library used by IBM WebSphere Application Server Liberty with the grpc-1.0 or grpcClient-1.0 feature enabled. This has been addressed. # ...

Continue Reading

CVSS3 - HIGH

php security update

[8.0.27-1] - rebase to 8.0.27Read More ...

Continue Reading

CVSS3 - CRITICAL

PHP vulnerabilities

## Releases * Ubuntu 22.10 * Ubuntu 22.04 LTS * Ubuntu 20.04 LTS * Ubuntu 18.04 LTS ## Packages * php7.2 - HTML-embedded scripting language interpreter * php7.4 - HTML-embedded scripting l ...

Continue Reading

CVSS3 - CRITICAL

PHP vulnerabilities

## Releases * Ubuntu 22.10 * Ubuntu 22.04 LTS * Ubuntu 20.04 LTS * Ubuntu 18.04 LTS ## Packages * php7.2 - HTML-embedded scripting language interpreter * php7.4 - HTML-embedded scripting l ...

Continue Reading

CVSS3 - CRITICAL

SUSE SLES15 / openSUSE 15 Security Update : php8 (SUSE-SU-2023:0527-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0527-1 advisory. - In PHP 8.0.X before 8.0.28, ...

Continue Reading

CVSS3 - CRITICAL

Jenkins plugins Multiple Vulnerabilities (2023-01-24)

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - High Script Security Plugin provides a s ...

Continue Reading

CVSS3 - CRITICAL

Jenkins plugins Multiple Vulnerabilities (2023-01-24)

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - High Script Security Plugin provides a s ...

Continue Reading

CVSS3 - CRITICAL

CVE-2022-45138

The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated ...

Continue Reading

CVSS3 - CRITICAL

Back to Main

Subscribe for the latest news: