Category: CVSS3 - MEDIUM
PHP vulnerability

## Releases * Ubuntu 16.04 ESM ## Packages * php7.0 - HTML-embedded scripting language interpreter It was discovered that PHP incorrectly handled certain invalid Blowfish password hashes. An inval ...

Continue Reading
PHP vulnerability

## Releases * Ubuntu 16.04 ESM ## Packages * php7.0 - HTML-embedded scripting language interpreter It was discovered that PHP incorrectly handled certain invalid Blowfish password hashes. An inval ...

Continue Reading
Mattermost Server < 7.1.6 / 7.2.x < 7.7.2 / 7.8.x < 7.8.1 Information Disclosure (MMSA-2023-00141)

The version of Mattermost Server running on the remote host is prior to 7.1.6, 7.2.x prior to 7.7.2 or 7.8.x prior to 7.8.1. It is, therefore, affected by an information disclosure vulnerability. An u ...

Continue Reading
Apache Commons Net vulnerability

## Releases * Ubuntu 22.10 * Ubuntu 22.04 LTS * Ubuntu 20.04 LTS * Ubuntu 18.04 ESM * Ubuntu 16.04 ESM ## Packages * libcommons-net-java - Apache Commons Net - Java client API for basic In ...

Continue Reading
[SECURITY] Fedora 36 Update: libpcap-1.10.4-1.fc36

Libpcap provides a portable framework for low-level network monitoring. Libpcap can provide network statistics collection, security monitoring and network debugging. Since almost every system vendor ...

Continue Reading
Metasploit Weekly Wrap-Up

## Scanner That Pulls Sensitive Information From Joomla Installations ![Metasploit Weekly Wrap-Up](https://blog.rapid7.com/content/images/2023/04/metasploit-fence-1.png) This week's Metasploit release ...

Continue Reading
CVE-2018-17453

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Attackers may have been able to obtain sensitive access-token data fro ...

Continue Reading
CVE-2018-17453

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Attackers may have been able to obtain sensitive access-token data fro ...

Continue Reading
Description of the security update for SharePoint Server 2019: April 11, 2023 (KB5002373)

None ## Summary This security update resolves a Microsoft SharePoint Server spoofing vulnerability. To learn more about the vulnerability, see ​​​​[Microsoft Common Vulnerabilities ...

Continue Reading
CVE-2023-30527

Jenkins WSO2 Oauth Plugin 1.0 and earlier stores the WSO2 Oauth client secret unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by users with access to the Jen ...

Continue Reading
Load more