Due to JMX/RMI services in TIBCO JasperReports Server version 8.0.2 Community Edition performing unsafe deserialization, it is possible to execute arbitrary code and system commands on the server system.
cf89a5a1afe1398d346a6c138d693ce3eb1e1c2bf02ce2079b699b2424581b9cThe Unqork Security team discovered multiple security vulnerabilities in the Qualys Cloud Agent including arbitrary code execution.
e2c9e183d9efb492bf157d76459e57b295f95b0dba1e6cdfd21218a957fbac87Red Hat Security Advisory 2022-6439-01 - The Booth cluster ticket manager is a component to bridge high availability clusters spanning multiple sites, in particular, to provide decision inputs to local Pacemaker cluster resource managers. It operates as a distributed consensus-based service, presumably on a separate physical network. Tickets facilitated by a Booth formation are the units of authorization that can be bound to certain resources. This will ensure that the resources are run at only one site at a time.
4e357f24faadc33236fd405f029a2c7668563bc9fc829b3ddf52d506559298acRed Hat Security Advisory 2022-6443-01 - MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Issues addressed include buffer overflow and use-after-free vulnerabilities.
7c2d7fc785387cf1bb9c214779b6f0934646fa120e7372370a8832a21e286f2dRed Hat Security Advisory 2022-6437-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
f3f264785925bce1d512b2444039369aa6962f148befe58b07a7a29e2cc12554Ubuntu Security Notice 5606-1 - It was discovered that poppler incorrectly handled certain PDF. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
8d2b5a758e23be6e0f4f84ae87d76727cc9114ede63102364ea1bc14cb277c65Apple Security Advisory 2022-09-12-5 - Safari 16 addresses buffer overflow, code execution, out of bounds read, and spoofing vulnerabilities.
7c9556f5dcc4cf57fb8f21c8c6cd1bdeff9396447e0843a5d5167e823eb1660aApple Security Advisory 2022-09-12-4 - macOS Monterey 12.6 addresses bypass and code execution vulnerabilities.
ae5b128906431e39c7cdcc62fea34df688d6743b44282376c5ded3878d090898Red Hat Security Advisory 2022-6447-01 - Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Issues addressed include denial of service and spoofing vulnerabilities.
a714de3eaf3a485724cf4aaca3389fd9847b067245c025269499321daae891aaRed Hat Security Advisory 2022-6448-01 - Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Issues addressed include a HTTP request smuggling vulnerability.
77059a5029e5fa0f7d043f17c6d1f94d86241739d27ad64bf098f71c62c37a97Red Hat Security Advisory 2022-6449-01 - Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Issues addressed include HTTP request smuggling and denial of service vulnerabilities.
cb5e66f8d412a46f5aff9c83c590b5c65a0a1bb01a1496c984882a20d23a1261Red Hat Security Advisory 2022-6450-01 - Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Issues addressed include denial of service, double free, and spoofing vulnerabilities.
64271aa943cadcf4f53769f49f2705c0658c289b46512a0840bf913803fc1cd1Red Hat Security Advisory 2022-6457-01 - Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
7266239c22b575a90f6bb3ad0f599c5c7156dfbfcf1d73eddfcff1d1b3d2334aRed Hat Security Advisory 2022-6460-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system.
42dfe8a02977eaee515c85025aba146e7dda9d87d0a0cc4997b08cdf8301293bRed Hat Security Advisory 2022-6463-01 - The GNU Privacy Guard is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards. Issues addressed include a spoofing vulnerability.
eb47351379cabbe9cec3103f6e9aa7072ef2a28cbcc12b29cd3b2715ed656cdbRed Hat Security Advisory 2022-6432-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include a privilege escalation vulnerability.
5b3d5768fed8f5960269f0604dcd439c614a07550bb11717dafffc39a90d33efRed Hat Security Advisory 2022-6429-01 - The Migration Toolkit for Containers enables you to migrate Kubernetes resources, persistent volume data, and internal container images between OpenShift Container Platform clusters, using the MTC web console or the Kubernetes API. Issues addressed include bypass, code execution, and denial of service vulnerabilities.
97d00be8290b2a65989161b47f8aa4313ba4132452bc72e5a92601cc91b50aa6Red Hat Security Advisory 2022-6430-01 - OpenShift API for Data Protection enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and snapshot-based backups for persistent volumes. Issues addressed include a denial of service vulnerability.
4f2de101a63895ce93b93d579c8522dbea6333fada1258ba314335efd601e058Academy Learning Management System version 5.7 suffers from a remote shell upload vulnerability.
8f5ea1ed03e514169afbef198fca84d3a923d2ba76402fc2c21d5c8fce52443aRocket LMS version 1.6 suffers from a cross site scripting vulnerability.
21a150d6f7bd763c17a361b4b333dd7a6dff2269a57ce56b55a37a298f1c638fRocket LMS version 1.6 suffers from a remote shell upload vulnerability.
e2684a4c3d7870e561b03625a565e5e6160ae406c842cde5968d1ac67eb2ffa3Red Hat Security Advisory 2022-6422-01 - Multicluster Engine for Kubernetes 2.0.2 images Multicluster engine for Kubernetes provides the foundational components that are necessary for the centralized management of multiple Kubernetes-based clusters across data centers, public clouds, and private clouds. You can use the engine to create new Red Hat OpenShift Container Platform clusters or to bring existing Kubernetes-based clusters under management by importing them. After the clusters are managed, you can use the APIs that are provided by the engine to distribute configuration based on placement policy. Issues addressed include a denial of service vulnerability.
f9f497cd32f3eec88a2d2917982db7ed736ec611fb5beef51d8ac5bf18b4848eRed Hat Security Advisory 2022-6426-01 - Multicluster Engine for Kubernetes 2.1.1 images Multicluster engine for Kubernetes provides the foundational components that are necessary for the centralized management of multiple Kubernetes-based clusters across data centers, public clouds, and private clouds. You can use the engine to create new Red Hat OpenShift Container Platform clusters or to bring existing Kubernetes-based clusters under management by importing them. After the clusters are managed, you can use the APIs that are provided by the engine to distribute configuration based on placement policy.
4530063619eddc0f3b1fb577df82b433ec7c62729c0ef8146eb511265ef2cfe1Red Hat Security Advisory 2022-6427-01 - Red Hat Advanced Cluster Management for Kubernetes 2.6.1 images Red Hat Advanced Cluster Management for Kubernetes provides the capabilities to address common challenges that administrators and site reliability engineers face as they work across a range of public and private cloud environments. Clusters and applications are all visible and managed from a single console—with security policy built in. This advisory contains the container images for Red Hat Advanced Cluster Management for Kubernetes, which fix several bugs.
9ccf8ae6f6199d91fcfbd65d852a261fb7a35153612560495b2880057dd2e5e4Red Hat Security Advisory 2022-6317-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.9.48. Issues addressed include a bypass vulnerability.
3f15efc05225b6294bf65a1ea6b228f58c09a6d5457425ee2388893c1ab723c3
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed