CVE-2024-35526

The FarCry Core framework (a ColdFusion language web application framework) by Daemon PTY Limited is vulnerable in versions prior to 7.2.14 . The root cause is the insecure storage of sensitive information , specifically allowing unauthorized access to the /facade directory. To resolve this issue...

CVE-2024-35527

The Daemon PTY Limited FarCry Core framework (a ColdFusion language web application framework) is vulnerable to an arbitrary file upload vulnerability in the /fileupload/upload.cfm endpoint in versions prior to 7.2.14 . An attacker can exploit this by uploading a crafted .cfm file to achieve arbi...

CVE-2024-35526

An issue in Daemon PTY Limited FarCry Core framework before 7.2.14 allows attackers to access sensitive information in the /facade directory...

PT-2024-5569 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 20.4R3-S10 Junos OS versions 21.2 prior to 21.2R3-S7 Junos OS versions 21.4 prior to 21.4R3-S6 Junos OS versions 22.1 prior to 22.1R3-S5 Junos OS versions 22.2 prior to 22.2R3-S3 Junos OS versions 22.3 prior to...

PT-2024-6532 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions 21.4R3 through 21.4R3-S5 Junos OS versions 22.1R3 through 22.1R3-S4 Junos OS versions 22.2R2 through 22.2R3 Junos OS versions 22.3R1 through 22.3R2-S2, 22.3R3 Junos OS versions 22.4R1 through 22.4R2 Description: An Improper...

PT-2024-6540 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 20.4R3-S10 Junos OS versions from 21.2 before 21.2R3-S7 Junos OS versions from 21.4 before 21.4R3-S6 Junos OS versions from 22.1 before 22.1R3-S5 Junos OS versions from 22.2 before 22.2R3-S3 Junos OS versions from...

SUSE: Security Advisory (SUSE-SU-2024:2170-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:2186-1 Security update for gnome-settings-daemon

This update for gnome-settings-daemon fixes the following issues: - CVE-2024-38394: Fixed mismatches in interpreting USB authorization policy bsc1226423...

SUSE SLES15: gnome-settings-daemon / gnome-settings-daemon-devel / etc (SUSE-SU-2024:2170-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2170-1 advisory. - CVE-2024-38394: Fixed mismatches in interpreting USB authorization policy bsc1226423. Tenable has extracted the preceding description bloc...

SUSE SLED15: gnome-settings-daemon / gnome-settings-daemon-devel / etc (SUSE-SU-2024:2168-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2168-1 advisory. - CVE-2024-38394: Fixed mismatches in interpreting USB authorization policy bsc1226423. Tenable has...

SUSE-SU-2024:2170-1 Security update for gnome-settings-daemon

This update for gnome-settings-daemon fixes the following issues: - CVE-2024-38394: Fixed mismatches in interpreting USB authorization policy bsc1226423...

SUSE-SU-2024:2168-1 Security update for gnome-settings-daemon

This update for gnome-settings-daemon fixes the following issues: - CVE-2024-38394: Fixed mismatches in interpreting USB authorization policy bsc1226423...

SUSE CVE-2021-47603

In the Linux kernel, the following vulnerability has been resolved: audit: improve robustness of the audit queue handling If the audit daemon were ever to get stuck in a stopped state the kernel's kauditdthread could get blocked attempting to send audit records to the userspace audit daemon. With...

PT-2024-5426

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a slab-use-after-free vulnerability in the cachefiles ondemand daemon read function. This vulnerability can be triggered by a fuzz test of randomly issuing the...

PT-2024-5424

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8.0-rc7-dirty 542 Description The issue is caused by a slab-use-after-free vulnerability in the cachefiles ondemand daemon read function. This occurs when a restore command is issued while the daemon is still...

OPENSUSE-SU-2024:14060-1 gnome-settings-daemon-46.0-5.1 on GA media

These are all security issues fixed in the gnome-settings-daemon-46.0-5.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-38359

The Lightning Network Daemon lnd - is a complete implementation of a Lightning Network node. A parsing vulnerability in lnd's onion processing logic and lead to a DoS vector due to excessive memory allocation. The issue was patched in lnd v0.17.0. Users should update to a version v0.17.0 to be...

CVE-2024-38359

The Lightning Network Daemon lnd - is a complete implementation of a Lightning Network node. A parsing vulnerability in lnd's onion processing logic and lead to a DoS vector due to excessive memory allocation. The issue was patched in lnd v0.17.0. Users should update to a version v0.17.0 to be...

CVE-2024-38359

The CVE-2024-38359 vulnerability affects the Lightning Network Daemon (lnd) in its onion processing logic, causing a Denial-of-Service due to excessive memory allocation. It has been patched in lnd v0.17.0; upgrading to a version greater than 0.17.0 mitigates the issue. As a partial mitigation, u...

CVE-2024-38359 Lightning Network Daemon Onion Bomb

The Lightning Network Daemon lnd - is a complete implementation of a Lightning Network node. A parsing vulnerability in lnd's onion processing logic and lead to a DoS vector due to excessive memory allocation. The issue was patched in lnd v0.17.0. Users should update to a version v0.17.0 to be...