Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
photonPhotonPHSA-2022-3.0-0449
HistorySep 09, 2022 - 12:00 a.m.

Important Photon OS Security Update - PHSA-2022-3.0-0449

2022-09-0900:00:00
github.com
17

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.3%

JSON

Updates of [‘ImageMagick’, ‘openjdk11’, ‘glib’] packages of Photon OS have been released.

OSVersionArchitecturePackageVersionFilename
Photon3.0x86_64openjdk11-doc< 11.0.12-3.ph3openjdk11-doc-11.0.12-3.ph3.x86_64.rpm
Photon3.0x86_64imagemagick-devel< 7.1.0.19-5.ph3ImageMagick-devel-7.1.0.19-5.ph3.x86_64.rpm
Photon3.0x86_64imagemagick< 7.1.0.19-5.ph3ImageMagick-7.1.0.19-5.ph3.x86_64.rpm
Photon3.0x86_64openjdk11< 11.0.12-3.ph3openjdk11-11.0.12-3.ph3.x86_64.rpm
Photon3.0x86_64openjdk11-src< 11.0.12-3.ph3openjdk11-src-11.0.12-3.ph3.x86_64.rpm
Photon3.0x86_64glib-devel< 2.58.0-9.ph3glib-devel-2.58.0-9.ph3.x86_64.rpm
Photon3.0x86_64imagemagick-c++< 7.1.0.19-5.ph3ImageMagick-c++-7.1.0.19-5.ph3.x86_64.rpm
Photon3.0x86_64imagemagick-c++-devel< 7.1.0.19-5.ph3ImageMagick-c++-devel-7.1.0.19-5.ph3.x86_64.rpm
Photon3.0x86_64glib< 2.58.0-9.ph3glib-2.58.0-9.ph3.x86_64.rpm
Photon3.0x86_64glib-schemas< 2.58.0-9.ph3glib-schemas-2.58.0-9.ph3.x86_64.rpm
Rows per page:
1-10 of 121

Related

photon 34
veracode 3
nessus 43
openvas 18
cvelist 4
osv 12
nvd 4
ibm 9
cbl_mariner 2
ubuntu 1
ubuntucve 3
gitlab 1
cloudfoundry 1
debiancve 3
redhatcve 3
cloudlinux 1
amazon 3
atlassian 1
github 1
cve 4
prion 4
debian 3
broadcom 1
suse 3
alpinelinux 2
githubexploit 1
googleprojectzero 1
cnvd 1
f5 1
redhat 12
rocky 2
vmware 2
hivepro 1
oraclelinux 4
packetstorm 1
zdt 2
exploitdb 1
almalinux 3
gentoo 1
redos 1
altlinux 1
photon
photon
Important Photon OS Security Update - PHSA-2022-4.0-0244
2022-09-08 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0300
2022-12-16 00:00:00
Important Photon OS Security Update - PHSA-2022-0244
2022-09-08 00:00:00
veracode
veracode
Privilege Escalation
2021-11-17 22:36:12
Remote Code Execution
2022-07-20 08:21:43
Denial Of Service (DoS)
2022-10-14 13:27:10
nessus
nessus
EulerOS Virtualization 3.0.2.0 : glib2 (EulerOS-SA-2023-1701)
2023-05-07 00:00:00
EulerOS Virtualization 3.0.6.0 : glib2 (EulerOS-SA-2023-2220)
2023-06-12 00:00:00
SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2022:0540-1)
2022-02-22 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5189-1)
2021-12-14 00:00:00
Huawei EulerOS: Security Advisory for glib2 (EulerOS-SA-2023-2410)
2023-07-25 00:00:00
Huawei EulerOS: Security Advisory for glib2 (EulerOS-SA-2023-2220)
2023-06-12 00:00:00
cvelist
cvelist
CVE-2022-34169 Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets
2022-07-19 00:00:00
CVE-2021-3800
2022-08-23 00:00:00
CVE-2022-0284
2022-08-29 14:03:03
osv
osv
CVE-2022-34169
2022-07-19 18:15:11
CVE-2021-3800
2022-08-23 16:15:09
glib2.0 - security update
2022-09-15 00:00:00
nvd
nvd
CVE-2022-34169
2022-07-19 18:15:11
CVE-2021-3800
2022-08-23 16:15:09
CVE-2022-0284
2022-08-29 15:15:09
ibm
ibm
Security Bulletin: IBM Sterling B2B Integrator vulnerable to remote code execution due to Apache Xalan Java XSLT (CVE-2022-34169)
2024-04-11 13:14:32
Security Bulletin: Vulnerability found in Apache Xalan Java XSLT library may affect IBM Enterprise Records
2022-10-20 11:30:21
Security Bulletin: IBM API Connect is impacted by a vulnerability in Apache Xalan Java XSLT library (CVE-2022-34169)
2022-12-01 00:42:16
cbl_mariner
cbl_mariner
CVE-2022-34169 affecting package openjdk8 1.8.0.332-2
2024-06-14 09:08:06
CVE-2021-3800 affecting package glib 2.58.0-9
2022-12-27 17:55:47
ubuntu
ubuntu
GLib vulnerability
2021-12-13 00:00:00
ubuntucve
ubuntucve
CVE-2022-0284
2022-08-29 00:00:00
CVE-2021-3800
2021-11-02 00:00:00
CVE-2022-34169
2022-07-19 00:00:00
gitlab
gitlab
Files or Directories Accessible to External Parties
2022-08-23 00:00:00
cloudfoundry
cloudfoundry
USN-5189-1: GLib vulnerability | Cloud Foundry
2022-01-20 00:00:00
debiancve
debiancve
CVE-2021-3800
2022-08-23 16:15:09
CVE-2022-34169
2022-07-19 18:15:11
CVE-2022-0284
2022-08-29 15:15:09
redhatcve
redhatcve
CVE-2021-3800
2021-10-05 18:00:54
CVE-2022-0284
2022-02-03 10:05:54
CVE-2022-34169
2022-07-19 22:54:51
cloudlinux
cloudlinux
Fix of CVE: CVE-2021-3800
2022-01-13 14:29:56
amazon
amazon
Medium: glib2
2023-05-25 17:41:00
Important: java-1.8.0-openjdk
2022-09-01 21:09:00
Important: java-11-amazon-corretto
2022-07-19 01:18:00
atlassian
atlassian
RCE (Remote Code Execution) xalan:xalan Dependency in Jira Software Data Center and Server
2024-03-07 14:45:37
github
github
Apache Xalan Java XSLT library integer truncation issue when processing malicious XSLT stylesheets
2022-07-20 00:00:18
cve
cve
CVE-2021-3800
2022-08-23 16:15:09
CVE-2022-0284
2022-08-29 15:15:09
CVE-2022-34169
2022-07-19 18:15:11
prion
prion
Heap overflow
2022-08-29 15:15:00
Design/Logic Flaw
2022-08-23 16:15:00
Integer overflow
2022-07-19 18:15:00
debian
debian
[SECURITY] [DLA 3110-1] glib2.0 security update
2022-09-15 12:57:23
[SECURITY] [DLA 3155-1] bcel security update
2022-10-18 17:56:10
[SECURITY] [DSA 5256-1] bcel security update
2022-10-18 18:04:55
broadcom
broadcom
Flaw in glib could leak content from files owned by priviledged users to unprivilged ones.
2023-08-01 00:00:00
suse
suse
Security update for ImageMagick (moderate)
2022-02-21 00:00:00
Security update for java-1_8_0-openjdk (important)
2022-08-19 00:00:00
Security update for java-11-openjdk (important)
2022-08-09 00:00:00
alpinelinux
alpinelinux
CVE-2022-0284
2022-08-29 15:15:09
CVE-2022-34169
2022-07-19 18:15:11
githubexploit
githubexploit
Exploit for Incorrect Conversion between Numeric Types in Apache Xalan-Java
2022-08-15 09:43:08
googleprojectzero
googleprojectzero
Gregor Samsa: Exploiting Java's XML Signature Verification
2022-11-02 00:00:00
cnvd
cnvd
Apache Xalan input validation error vulnerability
2022-07-21 00:00:00
f5
f5
K42795243 : Apache Xalan Java Library vulnerability CVE-2022-34169
2022-08-25 00:00:00
redhat
redhat
(RHSA-2021:4385) Moderate: glib2 security and bug fix update
2021-11-09 09:16:02
(RHSA-2022:5700) Important: java-1.8.0-openjdk security update
2022-07-25 14:50:55
(RHSA-2022:5698) Important: java-1.8.0-openjdk security, bug fix, and enhancement update
2022-07-25 14:05:42
rocky
rocky
glib2 security and bug fix update
2021-11-09 09:16:02
java-11-openjdk security, bug fix, and enhancement update
2022-07-21 13:41:28
vmware
vmware
VMware Cloud Director Appliance contains an authentication bypass vulnerability (CVE-2023-34060).
2023-11-14 00:00:00
VMware Cloud Director Appliance contains an authentication bypass vulnerability (CVE-2023-34060).
2023-11-14 00:00:00
hivepro
hivepro
VMware Unveils Critical Authentication Bypass Vulnerability in VCD Appliance
2023-11-17 08:07:39
oraclelinux
oraclelinux
glib2 security and bug fix update
2021-11-16 00:00:00
java-1.8.0-openjdk security, bug fix, and enhancement update
2022-07-26 00:00:00
java-11-openjdk security, bug fix, and enhancement update
2022-07-26 00:00:00
packetstorm
packetstorm
VMware Cloud Director 10.5 Authentication Bypass
2024-03-13 00:00:00
zdt
zdt
VMware Cloud Director - Bypass identity verification Exploit
2023-12-08 00:00:00
VMware Cloud Director 10.5 - Bypass identity verification Exploit
2024-03-12 00:00:00
exploitdb
exploitdb
VMware Cloud Director 10.5 - Bypass identity verification
2024-03-12 00:00:00
almalinux
almalinux
Moderate: glib2 security and bug fix update
2021-11-09 09:16:02
Important: java-11-openjdk security, bug fix, and enhancement update
2022-07-25 00:00:00
Important: java-1.8.0-openjdk security, bug fix, and enhancement update
2022-07-25 00:00:00
gentoo
gentoo
Apache Commons BCEL: Remote Code Execution
2024-05-05 00:00:00
redos
redos
ROS-20240522-05
2024-05-22 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package java-11-openjdk version 0:11.0.16.0.8-alt1_1jpp11
2022-08-05 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.3%

JSON
Related for PHSA-2022-3.0-0449
photon34veracode3nessus43openvas18cvelist4osv12nvd4ibm9cbl_mariner2ubuntu1ubuntucve3gitlab1cloudfoundry1debiancve3redhatcve3cloudlinux1amazon3atlassian1github1cve4prion4debian3broadcom1suse3alpinelinux2githubexploit1googleprojectzero1cnvd1f51redhat12rocky2vmware2hivepro1oraclelinux4packetstorm1zdt2exploitdb1almalinux3gentoo1redos1altlinux1