Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
photonPhotonPHSA-2023-4.0-0336
HistoryFeb 18, 2023 - 12:00 a.m.

Important Photon OS Security Update - PHSA-2023-4.0-0336

2023-02-1800:00:00
github.com
25
photon os
security update
phsa-2023-4.0-0336
kafka
postgresql10
unix

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.9

Confidence

Low

EPSS

0.965

Percentile

99.6%

JSON

Updates of [‘postgresql10’, ‘kafka’] packages of Photon OS have been released.

Related

photon 35
cve 3
osv 16
ibm 13
metasploit 1
githubexploit 5
nessus 44
cnvd 1
veracode 2
zdt 3
atlassian 1
nuclei 1
github 2
cloudfoundry 1
altlinux 7
openvas 15
prion 3
debian 1
ubuntucve 2
rapid7blog 1
redhatcve 2
packetstorm 2
cvelist 3
nvd 3
kaspersky 1
mageia 1
ubuntu 1
cgr 1
oraclelinux 5
wolfi 1
cbl_mariner 2
redhat 6
debiancve 1
almalinux 5
freebsd 1
alpinelinux 1
rocky 2
vmware 2
hivepro 1
exploitdb 1
photon
photon
Low Photon OS Security Update - PHSA-2023-3.0-0531
2023-02-10 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0013
2023-05-27 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0143
2023-11-15 00:00:00
cve
cve
CVE-2023-25194
2023-02-07 20:15:09
CVE-2022-41862
2023-03-03 16:15:09
CVE-2023-34060
2023-11-14 21:15:09
osv
osv
Apache Kafka Connect vulnerable to Deserialization of Untrusted Data
2023-02-07 21:30:23
Low: libpq security update
2023-11-14 00:00:00
CGA-97hx-cgcp-cf39
2024-06-06 12:25:23
ibm
ibm
Security Bulletin: Vulnerability in Apache Kafka may affect IBM Business Automation Workflow - CVE-2023-25194
2023-03-31 13:48:35
Security Bulletin: Vulnerability in Apache Kafka affects IBM Process Mining . CVE-2023-25194
2023-10-09 10:44:25
Security Bulletin: There is a vulnerability in kafka-clients-2.8.2.jar used by IBM Maximo Asset Management application (CVE-2023-25194)
2024-02-01 13:36:54
metasploit
metasploit
Apache Druid JNDI Injection RCE
2023-06-22 12:17:32
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Kafka Connect
2023-12-28 04:24:02
Exploit for Deserialization of Untrusted Data in Apache Kafka Connect
2024-04-17 13:36:34
Exploit for Deserialization of Untrusted Data in Apache Kafka Connect
2023-02-09 10:49:46
nessus
nessus
Photon OS 5.0: Kafka PHSA-2023-5.0-0013
2024-07-23 00:00:00
SUSE SLES12 Security Update : postgresql14 (SUSE-SU-2023:0392-1)
2023-02-15 00:00:00
SUSE SLES12 Security Update : postgresql12 (SUSE-SU-2023:0390-1)
2023-02-15 00:00:00
cnvd
cnvd
Apache Kafka code issue vulnerability (CNVD-2023-23554)
2023-02-17 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2023-05-22 13:41:28
Information Disclosure
2023-02-11 23:04:31
zdt
zdt
Apache Druid JNDI Injection Remote Code Execution Exploit
2023-06-27 00:00:00
VMware Cloud Director 10.5 - Bypass identity verification Exploit
2024-03-12 00:00:00
VMware Cloud Director - Bypass identity verification Exploit
2023-12-08 00:00:00
atlassian
atlassian
Apache Kafka Connect API Vulnerability in Bitbucket Data Center and Server
2023-10-06 17:45:41
nuclei
nuclei
Apache Druid Kafka Connect - Remote Code Execution
2023-04-23 20:43:19
github
github
Apache Kafka Connect vulnerable to Deserialization of Untrusted Data
2023-02-07 21:30:23
3 ways to get Remote Code Execution in Kafka UI
2024-07-22 15:00:59
cloudfoundry
cloudfoundry
USN-5906-1: PostgreSQL vulnerability | Cloud Foundry
2023-03-23 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package postgresql12-1C version 12.14-alt0.M90P.1
2023-02-28 00:00:00
Security fix for the ALT Linux 10 package postgresql14 version 14.7-alt1
2023-02-20 00:00:00
Security fix for the ALT Linux 10 package postgresql13 version 13.10-alt1
2023-02-20 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:0450-1)
2023-02-21 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0391-1)
2023-02-14 00:00:00
PostgreSQL 12.x < 12.14, 13.x < 13.10, 14.x < 14.7, 15.x < 15.2 Information Disclosure Vulnerability - Windows
2023-02-10 00:00:00
prion
prion
Code injection
2023-03-03 16:15:00
Deserialization of untrusted data
2023-02-07 20:15:00
Authentication flaw
2023-11-14 21:15:00
debian
debian
[SECURITY] [DLA 3316-1] postgresql-11 security update
2023-02-10 13:33:02
ubuntucve
ubuntucve
CVE-2023-25194
2023-02-07 00:00:00
CVE-2022-41862
2023-02-10 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-06-30 18:47:37
redhatcve
redhatcve
CVE-2023-25194
2023-06-21 16:24:00
CVE-2022-41862
2023-02-15 15:29:59
packetstorm
packetstorm
Apache Druid JNDI Injection Remote Code Execution
2023-06-27 00:00:00
VMware Cloud Director 10.5 Authentication Bypass
2024-03-13 00:00:00
cvelist
cvelist
CVE-2023-25194 Apache Kafka Connect API: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration using Kafka Connect
2023-02-07 19:11:22
CVE-2022-41862
2023-03-03 00:00:00
CVE-2023-34060
2023-11-14 20:20:51
nvd
nvd
CVE-2023-25194
2023-02-07 20:15:09
CVE-2022-41862
2023-03-03 16:15:09
CVE-2023-34060
2023-11-14 21:15:09
kaspersky
kaspersky
KLA20223 OSI vulnerability in PostgreSQL
2023-02-09 00:00:00
mageia
mageia
Updated postgresql packages fix security vulnerability
2023-02-27 23:27:16
ubuntu
ubuntu
PostgreSQL vulnerability
2023-03-02 00:00:00
cgr
cgr
CVE-2022-41862 vulnerabilities
2024-05-19 03:07:16
oraclelinux
oraclelinux
libpq security update
2023-11-17 00:00:00
libpq security update
2023-11-11 00:00:00
postgresql security update
2023-04-11 00:00:00
wolfi
wolfi
CVE-2022-41862 vulnerabilities
2024-09-28 21:12:41
cbl_mariner
cbl_mariner
CVE-2022-41862 affecting package postgresql for versions less than 14.11-1
2024-03-05 17:52:42
CVE-2022-41862 affecting package postgresql 12.15-1
2024-09-28 21:12:08
redhat
redhat
(RHSA-2023:7016) Low: libpq security update
2023-11-14 08:42:45
(RHSA-2023:6429) Low: libpq security update
2023-11-07 06:05:24
(RHSA-2023:1241) Moderate: Red Hat AMQ Streams 2.2.1 release and security update
2023-03-14 18:46:27
debiancve
debiancve
CVE-2022-41862
2023-03-03 16:15:09
almalinux
almalinux
Low: libpq security update
2023-11-07 00:00:00
Low: libpq security update
2023-11-14 00:00:00
Moderate: postgresql security update
2023-04-11 00:00:00
freebsd
freebsd
PostgreSQL server -- Client memory disclosure when connecting, with Kerberos, to modified server.
2023-02-09 00:00:00
alpinelinux
alpinelinux
CVE-2022-41862
2023-03-03 16:15:09
rocky
rocky
postgresql:13 security update
2023-04-06 15:52:43
postgresql:12 security update
2023-10-06 23:10:12
vmware
vmware
VMware Cloud Director Appliance contains an authentication bypass vulnerability (CVE-2023-34060).
2023-11-14 00:00:00
VMware Cloud Director Appliance contains an authentication bypass vulnerability (CVE-2023-34060).
2023-11-14 00:00:00
hivepro
hivepro
VMware Unveils Critical Authentication Bypass Vulnerability in VCD Appliance
2023-11-17 08:07:39
exploitdb
exploitdb
VMware Cloud Director 10.5 - Bypass identity verification
2024-03-12 00:00:00

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.9

Confidence

Low

EPSS

0.965

Percentile

99.6%

JSON
Related for PHSA-2023-4.0-0336
photon35cve3osv16ibm13metasploit1githubexploit5nessus44cnvd1veracode2zdt3atlassian1nuclei1github2cloudfoundry1altlinux7openvas15prion3debian1ubuntucve2rapid7blog1redhatcve2packetstorm2cvelist3nvd3kaspersky1mageia1ubuntu1cgr1oraclelinux5wolfi1cbl_mariner2redhat6debiancve1almalinux5freebsd1alpinelinux1rocky2vmware2hivepro1exploitdb1