Поиск уязвимостей
Количество 58
Количество 58
ALT-PU-2023-7514
ALT-PU-2023-7514: package `mysql-connector-odbc` update to version 8.0.35-alt2
ALT-PU-2023-7323
ALT-PU-2023-7323: package `mysql-connector-odbc` update to version 8.0.35-alt1
CVE-2022-24407
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
CVE-2022-24407
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
CVE-2022-24407
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
CVE-2022-24407
CVE-2022-24407
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does ...
CVE-2022-2097
AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).
CVE-2022-2097
AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).
CVE-2022-2097
AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).
CVE-2022-2097
CVE-2022-2097
AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimi ...
openSUSE-SU-2022:0743-1
Security update for cyrus-sasl
SUSE-SU-2022:14894-1
Security update for cyrus-sasl
SUSE-SU-2022:0743-1
Security update for cyrus-sasl
SUSE-SU-2022:0702-1
Security update for cyrus-sasl
SUSE-SU-2022:0693-1
Security update for cyrus-sasl
SUSE-SU-2022:0653-1
Security update for cyrus-sasl
RLSA-2022:0658
Important: cyrus-sasl security update
GHSA-fvc5-cffp-h22w
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2023-7514 ALT-PU-2023-7514: package `mysql-connector-odbc` update to version 8.0.35-alt2 | CVSS3: 9.1 | почти 3 года назад | |
| ALT-PU-2023-7323 ALT-PU-2023-7323: package `mysql-connector-odbc` update to version 8.0.35-alt1 | CVSS3: 9.1 | почти 3 года назад | |
 | CVE-2022-24407 In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement. | CVSS3: 8.8 | 4% Низкий | больше 4 лет назад |
 | CVE-2022-24407 In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement. | CVSS3: 8.8 | 4% Низкий | больше 4 лет назад |
 | CVE-2022-24407 In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement. | CVSS3: 8.8 | 4% Низкий | больше 4 лет назад |
 | CVSS3: 8.8 | 4% Низкий | больше 4 лет назад | |
| CVE-2022-24407 In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does ... | CVSS3: 8.8 | 4% Низкий | больше 4 лет назад |
| CVE-2022-2097 AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p). | CVSS3: 5.3 | 5% Низкий | больше 4 лет назад |
| CVE-2022-2097 AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p). | CVSS3: 5.3 | 5% Низкий | больше 4 лет назад |
| CVE-2022-2097 AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p). | CVSS3: 5.3 | 5% Низкий | больше 4 лет назад |
| CVSS3: 5.3 | 5% Низкий | больше 4 лет назад | |
| CVE-2022-2097 AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimi ... | CVSS3: 5.3 | 5% Низкий | больше 4 лет назад |
 | openSUSE-SU-2022:0743-1 Security update for cyrus-sasl | 4% Низкий | больше 4 лет назад | |
| SUSE-SU-2022:14894-1 Security update for cyrus-sasl | 4% Низкий | больше 4 лет назад | |
| SUSE-SU-2022:0743-1 Security update for cyrus-sasl | 4% Низкий | больше 4 лет назад | |
| SUSE-SU-2022:0702-1 Security update for cyrus-sasl | 4% Низкий | больше 4 лет назад | |
| SUSE-SU-2022:0693-1 Security update for cyrus-sasl | 4% Низкий | больше 4 лет назад | |
| SUSE-SU-2022:0653-1 Security update for cyrus-sasl | 4% Низкий | больше 4 лет назад | |
 | RLSA-2022:0658 Important: cyrus-sasl security update | 4% Низкий | больше 4 лет назад | |
| GHSA-fvc5-cffp-h22w In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement. | CVSS3: 8.8 | 4% Низкий | больше 4 лет назад |
Уязвимостей на страницу