Debian DSA-5082-1 : php7.4 – security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5082 advisory. - In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8. ...

Continue Reading
(RHSA-2022:0581) Important: ruby:2.6 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * rubygem-bundler: Dependencies ...

Continue Reading

CVSS3 - HIGH

CVSS2 - HIGH

PHP vulnerabilities

## Releases * Ubuntu 16.04 ESM ## Packages * php7.0 - HTML-embedded scripting language interpreter It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use th ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - HIGH

SUSE SLES12 Security Update : php72 (SUSE-SU-2022:0577-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0577-1 advisory. - An issue was discovered in PHP 7.3.x befor ...

Continue Reading
Cobbler subject to Command Injection

A Command Injection in action_power.py in Cobbler prior to v2.6.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) password fields to the power ...

Continue Reading

CVSS2 - HIGH

U.S. Dept Of Defense: xmlrpc.php file enabled at ██████.org

**Description:** XML-RPC on WordPress is actually an API that allows developers who make 3rd party application and services the ability to interact to your WordPress site. The XML-RPC API that WordPre ...

Continue Reading
CVE-2022-35405

Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. (This also affects ManageEngine Access Manager Plus before 4303 with ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - HIGH

CVE-2022-25313

In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element. #### Notes Author| Note ---|--- [sbeattie]() | paraview uses ...

Continue Reading

CVSS3 - MEDIUM

CVSS2 - MEDIUM

Back to Main

Subscribe for the latest news: