Category Archives: Advisories

ZDI-22-1030: (Pwn2Own) Unified Automation OPC UA C++ Demo Server OpcUa_SecureListener_ProcessSessionCallRequest Improper Update of Reference Count Denial-of-Service Vulnerability

Read Time:9 Second

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server. Authentication is not required to exploit this vulnerability.

Read More

[R1] Tenable.sc 5.22.0 Fixes One Third-Party Vulnerability

Read Time:29 Second

[R1] Tenable.sc 5.22.0 Fixes One Third-Party Vulnerability
Arnie Cabral
Wed, 07/27/2022 – 18:26

Tenable.sc leverages third-party software to help provide underlying functionality. One of the third-party components (moment.js) was found to contain vulnerabilities, and updated versions have been made available by the providers.

Out of caution, and in line with best practice, Tenable has upgraded the bundled components to address the potential impact of these issues. Tenable.sc 5.22.0 updates moment.js to version 2.29.4 to address the identified vulnerabilities.

Read More

grafana-9.0.5-1.fc37

Read Time:26 Second

FEDORA-2022-047d3845db

Packages in this update:

grafana-9.0.5-1.fc37

Update description:

Automatic update for grafana-9.0.5-1.fc37.

Changelog

* Wed Jul 27 2022 Andreas Gerstmayr <agerstmayr@redhat.com> 9.0.5-1
– update to 9.0.5 tagged upstream community sources, see CHANGELOG (rhbz#2107413)
– run integration tests in check phase
– remove conditional around go-rpm-macros
– resolve CVE-2022-31107 grafana: OAuth account takeover (rhbz#2107435)
– resolve CVE-2022-31097 grafana: stored XSS vulnerability (rhbz#2107436)

Read More