F-Secure Endpoint Protection Products On Mac, F-Secure Linux Security (32-bit), F-Secure Linux Security 64, F-Secure Atlant, F-Secure Internet Gatekeeper & F-Secure Security Cloud Security Vulnerabilities

Updated nano packages fix security vulnerability

A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privileges....

Updated atril packages fix security vulnerability

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the user....

Updated nss & firefox packages fix security vulnerabilities

Use-after-free in networking. (CVE-2024-5702) Use-after-free in JavaScript object transplant. (CVE-2024-5688) External protocol handlers leaked by timing attack. (CVE-2024-5690) Sandboxed iframes were able to bypass sandbox restrictions to open a new window. (CVE-2024-5691) Cross-Origin Image leak....

CVE-2024-38395

In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially...

CVE-2024-38395

In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially...

CVE-2024-38394

Mismatches in interpreting USB authorization policy between GNOME Settings Daemon (GSD) through 46.0 and the Linux kernel's underlying device matching logic allow a physically proximate attacker to access some unintended Linux kernel USB functionality, such as USB device-specific kernel modules...

CVE-2024-38394

Mismatches in interpreting USB authorization policy between GNOME Settings Daemon (GSD) through 46.0 and the Linux kernel's underlying device matching logic allow a physically proximate attacker to access some unintended Linux kernel USB functionality, such as USB device-specific kernel modules...

CVE-2024-38395

In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially...

Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested

A 22-year-old man from the United Kingdom arrested this week in Spain is allegedly the ringleader of Scattered Spider, a cybercrime group suspected of hacking into Twilio, LastPass, DoorDash, Mailchimp, and nearly 130 other organizations over the past two years. The Spanish daily Murcia Today...

ectm.fr Cross Site Scripting vulnerability OBB-3935473

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

toutembal.fr Cross Site Scripting vulnerability OBB-3935472

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, datadog-agent, kyverno-policy-reporter, dagger, external-dns, dynamic-localpv-provisioner, tigera-operator, grafana-operator, argo-cd, velero, thanos, kuberay-operator, terraform-provider-azurerm, argo-workflows, helm, kpt, ctop,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, datadog-agent, kyverno-policy-reporter, dagger, external-dns, dynamic-localpv-provisioner, tigera-operator, grafana-operator, argo-cd, dockerize, velero, thanos, kuberay-operator, speedtest-go, esbuild, hello-world-golang, helm,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: external-dns, dynamic-localpv-provisioner, argo-cd, thanos, terraform-provider-azurerm, helm, kpt, amass, grpcurl, fuse-overlayfs-snapshotter, coredns, hey, git-lfs, traefik, gatekeeper, pulumi-language-java, minio, hugo, vault-csi-provider, nri-prometheus, aactl,...

CVE-2024-4323 vulnerabilities

Vulnerabilities for packages:...

GHSA-68MR-468G-4WMG vulnerabilities

Vulnerabilities for packages:...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: nri-jmx, gobump, external-dns, kuberay-operator, fuse-overlayfs-snapshotter, direnv, kube-state-metrics, cri-tools, node-feature-discovery, flux-image-reflector-controller, fulcio, kube-rbac-proxy, cadvisor, prometheus-nats-exporter, shfmt, nri-memcached, kor,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, external-dns, dynamic-localpv-provisioner, argo-cd, thanos, helm, kpt, grpcurl, kube-fluentd-operator, prometheus-operator, fuse-overlayfs-snapshotter, coredns, vault, hey, git-lfs, zot, kube-state-metrics,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, datadog-agent, kyverno-policy-reporter, dagger, external-dns, dynamic-localpv-provisioner, tigera-operator, grafana-operator, argo-cd, velero, thanos, kuberay-operator, terraform-provider-azurerm, argo-workflows, helm, kpt, ctop,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, datadog-agent, kyverno-policy-reporter, dagger, external-dns, dynamic-localpv-provisioner, tigera-operator, grafana-operator, argo-cd, dockerize, velero, thanos, kuberay-operator, speedtest-go, esbuild, hello-world-golang, helm,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, datadog-agent, kyverno-policy-reporter, dagger, external-dns, dynamic-localpv-provisioner, tigera-operator, grafana-operator, argo-cd, dockerize, velero, thanos, kuberay-operator, speedtest-go, esbuild, hello-world-golang, helm,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: restic, external-dns, step-ca, grafana-agent-operator, secrets-store-csi-driver-provider-azure, velero, prometheus, kyverno, keda, thanos, cert-manager, chezmoi, teleport, cortex, argo-workflows, rook, harbor-registry, falcoctl, fluent-bit-plugin-loki, ksops, guac,...

GHSA-M5VV-6R4H-3VJ9 vulnerabilities

Vulnerabilities for packages: restic, external-dns, step-ca, grafana-agent-operator, secrets-store-csi-driver-provider-azure, velero, prometheus, kyverno, keda, thanos, cert-manager, chezmoi, teleport, cortex, argo-workflows, rook, harbor-registry, falcoctl, fluent-bit-plugin-loki, ksops, guac,...

GHSA-RCJV-MGP8-QVMR vulnerabilities

Vulnerabilities for packages: kubevela, gatekeeper, prometheus-adapter, up, gitlab-kas, calico, prometheus, k3s, keda, cert-manager, kubernetes, caddy, thanos,...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: kubevela, gatekeeper, prometheus-adapter, up, gitlab-kas, calico, prometheus, k3s, keda, cert-manager, kubernetes, caddy, thanos,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: nri-jmx, gobump, dagger, external-dns, kuberay-operator, neuvector-controller, fuse-overlayfs-snapshotter, direnv, kube-state-metrics, cri-tools, node-feature-discovery, flux-image-reflector-controller, fulcio, cadvisor, prometheus-nats-exporter, shfmt, nri-memcached,....

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, kyverno-policy-reporter, external-dns, dynamic-localpv-provisioner, tigera-operator, argo-cd, dockerize, thanos, terraform-provider-azurerm, argo-workflows, helm, docker-credential-acr-env, src-fingerprint, terragrunt, amass,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: nri-jmx, gobump, external-dns, kuberay-operator, fuse-overlayfs-snapshotter, direnv, kube-state-metrics, cri-tools, node-feature-discovery, flux-image-reflector-controller, fulcio, kube-rbac-proxy, cadvisor, prometheus-nats-exporter, shfmt, nri-memcached, kor,...

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: nri-jmx, gobump, dagger, external-dns, kuberay-operator, neuvector-controller, fuse-overlayfs-snapshotter, direnv, kube-state-metrics, cri-tools, node-feature-discovery, flux-image-reflector-controller, fulcio, cadvisor, prometheus-nats-exporter, shfmt, nri-memcached,....

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, external-dns, dynamic-localpv-provisioner, argo-cd, thanos, helm, kpt, amass, grpcurl, kube-fluentd-operator, prometheus-operator, fuse-overlayfs-snapshotter, coredns, vault, hey, git-lfs, zot, kube-state-metrics,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, datadog-agent, kyverno-policy-reporter, dagger, external-dns, dynamic-localpv-provisioner, tigera-operator, grafana-operator, argo-cd, dockerize, velero, thanos, kuberay-operator, speedtest-go, esbuild, hello-world-golang, helm,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, datadog-agent, kyverno-policy-reporter, dagger, external-dns, dynamic-localpv-provisioner, tigera-operator, grafana-operator, argo-cd, dockerize, velero, thanos, kuberay-operator, speedtest-go, esbuild, hello-world-golang, helm,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, datadog-agent, kyverno-policy-reporter, dagger, external-dns, dynamic-localpv-provisioner, tigera-operator, grafana-operator, argo-cd, dockerize, velero, thanos, kuberay-operator, speedtest-go, esbuild, hello-world-golang, helm,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, external-dns, dynamic-localpv-provisioner, argo-cd, thanos, helm, kpt, amass, grpcurl, kube-fluentd-operator, prometheus-operator, fuse-overlayfs-snapshotter, coredns, vault, hey, git-lfs, zot, kube-state-metrics,...

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, external-dns, dynamic-localpv-provisioner, argo-cd, thanos, helm, kpt, grpcurl, kube-fluentd-operator, prometheus-operator, fuse-overlayfs-snapshotter, coredns, vault, hey, git-lfs, zot, kube-state-metrics,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: node-problem-detector, kubevela, envoy-ratelimit, influxd, dgraph, external-dns, pulumi-kubernetes-operator, gitlab-pages, mc, dynamic-localpv-provisioner, argo-cd, cluster-autoscaler, aws-efs-csi-driver, prometheus, keda, kubeflow-katib, cert-manager, spark-operator,....

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: external-dns, dynamic-localpv-provisioner, argo-cd, thanos, terraform-provider-azurerm, helm, kpt, amass, grpcurl, fuse-overlayfs-snapshotter, coredns, hey, git-lfs, traefik, gatekeeper, pulumi-language-java, minio, hugo, vault-csi-provider, nri-prometheus, aactl,...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, kyverno-policy-reporter, external-dns, dynamic-localpv-provisioner, tigera-operator, argo-cd, dockerize, thanos, terraform-provider-azurerm, argo-workflows, helm, docker-credential-acr-env, src-fingerprint, terragrunt, amass,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, datadog-agent, kyverno-policy-reporter, dagger, external-dns, dynamic-localpv-provisioner, tigera-operator, grafana-operator, argo-cd, dockerize, velero, thanos, kuberay-operator, speedtest-go, esbuild, hello-world-golang, helm,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, datadog-agent, kyverno-policy-reporter, dagger, external-dns, dynamic-localpv-provisioner, tigera-operator, grafana-operator, argo-cd, dockerize, velero, thanos, kuberay-operator, speedtest-go, esbuild, hello-world-golang, helm,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, datadog-agent, kyverno-policy-reporter, dagger, external-dns, dynamic-localpv-provisioner, tigera-operator, grafana-operator, argo-cd, dockerize, velero, thanos, kuberay-operator, speedtest-go, esbuild, hello-world-golang, helm,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: nri-jmx, gobump, dagger, external-dns, kuberay-operator, neuvector-controller, fuse-overlayfs-snapshotter, direnv, kube-state-metrics, cri-tools, node-feature-discovery, flux-image-reflector-controller, fulcio, cadvisor, prometheus-nats-exporter, shfmt, nri-memcached,....

GHSA-236W-P7WF-5PH8 vulnerabilities

Vulnerabilities for packages: nri-jmx, gobump, dagger, external-dns, kuberay-operator, neuvector-controller, fuse-overlayfs-snapshotter, direnv, kube-state-metrics, cri-tools, node-feature-discovery, flux-image-reflector-controller, fulcio, cadvisor, prometheus-nats-exporter, shfmt, nri-memcached,....

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, datadog-agent, kyverno-policy-reporter, dagger, external-dns, dynamic-localpv-provisioner, tigera-operator, grafana-operator, argo-cd, dockerize, velero, thanos, kuberay-operator, speedtest-go, esbuild, hello-world-golang, helm,...

Exploit for CVE-2024-30078

CVE-2024-30078 Detection and Command Execution Script This...

CVE-2024-6016

A vulnerability, which was classified as critical, has been found in itsourcecode Online Laundry Management System 1.0. Affected by this issue is some unknown functionality of the file admin_class.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely.....

CVE-2024-6016

A vulnerability, which was classified as critical, has been found in itsourcecode Online Laundry Management System 1.0. Affected by this issue is some unknown functionality of the file admin_class.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely.....

CVE-2024-6016 itsourcecode Online Laundry Management System admin_class.php sql injection

A vulnerability, which was classified as critical, has been found in itsourcecode Online Laundry Management System 1.0. Affected by this issue is some unknown functionality of the file admin_class.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely.....

Exploit for OS Command Injection in Php

CVE-2024-4577 In PHP when using Apache and PHP-CGI on...

bazakolejowa.pl Cross Site Scripting vulnerability OBB-3935467

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...