OPENSUSE-SU-2024:10855-1 icedtea-web-1.8.6-1.3 on GA media

These are all security issues fixed in the icedtea-web-1.8.6-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10751-1 feh-3.7-1.3 on GA media

These are all security issues fixed in the feh-3.7-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11104-1 liboath-devel-2.6.7-1.3 on GA media

These are all security issues fixed in the liboath-devel-2.6.7-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11106-1 obs-service-source_validator-0.21-1.3 on GA media

These are all security issues fixed in the obs-service-sourcevalidator-0.21-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10718-1 discount-2.2.7-1.3 on GA media

These are all security issues fixed in the discount-2.2.7-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10794-1 glusterfs-9.1-1.3 on GA media

These are all security issues fixed in the glusterfs-9.1-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11186-1 postgresql12-12.8-1.3 on GA media

These are all security issues fixed in the postgresql12-12.8-1.3 package on the GA media of openSUSE Tumbleweed...

GHSA-X268-QPG6-W9G2 CrateDB has a Client initialized Session-Renegotiation DoS

Summary Client-Initiated TLS Renegotiation Denial of Service DoS Vulnerability at Port 4200 Details A high-risk vulnerability has been identified where the TLS endpoint port 4200 permits client-initiated renegotiation. In this scenario, an attacker can exploit this feature to repeatedly request...

CrateDB has a Client initialized Session-Renegotiation DoS

Summary Client-Initiated TLS Renegotiation Denial of Service DoS Vulnerability at Port 4200 Details A high-risk vulnerability has been identified where the TLS endpoint port 4200 permits client-initiated renegotiation. In this scenario, an attacker can exploit this feature to repeatedly request...

CVE-2024-37309

CrateDB is a distributed SQL database. A high-risk vulnerability has been identified in versions prior to 5.7.2 where the TLS endpoint port 4200 permits client-initiated renegotiation. In this scenario, an attacker can exploit this feature to repeatedly request renegotiation of security parameter...

CVE-2024-37309 Client initialized Session-Renegotiation DoS

CrateDB is a distributed SQL database. A high-risk vulnerability has been identified in versions prior to 5.7.2 where the TLS endpoint port 4200 permits client-initiated renegotiation. In this scenario, an attacker can exploit this feature to repeatedly request renegotiation of security parameter...

CVE-2024-37309 Client initialized Session-Renegotiation DoS

CrateDB is a distributed SQL database. A high-risk vulnerability has been identified in versions prior to 5.7.2 where the TLS endpoint port 4200 permits client-initiated renegotiation. In this scenario, an attacker can exploit this feature to repeatedly request renegotiation of security parameter...

Medium: openssl11

Issue Overview: Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem...

Boelter Blue System Management SQL Injection Vulnerability

Boelter Blue System Management is a mobile application from Boelter, Inc. Boelter Blue System Management version 1.3 suffers from a SQL injection vulnerability that originates from a vulnerability that allows an attacker to execute arbitrary SQL commands via affected parameters, which could lead ...

OpenSSL 1.0.2 < 1.0.2zc Vulnerability

The version of OpenSSL installed on the remote host is prior to 1.0.2zc. It is, therefore, affected by a vulnerability as referenced in the 1.0.2zc advisory. - There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS...

WordPress Download Attachments plugin <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Krzysztof Zając in WordPress Plugin Download Attachments versions = 1.3...

PT-2024-26438 · Unknown · Html2Xhtml

Name of the Vulnerable Software and Affected Versions: html2xhtml version 1.3 Description: A stack-buffer-overflow issue exists in the read charset decl function due to improper bounds checking when copying data into a fixed-size stack buffer. An attacker can exploit this by providing a specially...

SUSE SLED15: perl / perl-32bit / perl-base / perl-base-32bit / perl-core-DB_File / etc (SUSE-SU-2024:1762-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1762-1 advisory. Security issues fixed: - CVE-2018-6913: Fixed space calculation issues in pppack.c bsc1082216 -...

SUSE-SU-2024:1762-2 Security update for perl

This update for perl fixes the following issues: Security issues fixed: - CVE-2018-6913: Fixed space calculation issues in pppack.c bsc1082216 - CVE-2018-6798: Fixed heap buffer overflow in regexec.c bsc1082233 Non-security issue fixed: - make Net::FTP work with TLS 1.3 bsc1213638...

UBUNTU-CVE-2024-30268

Cacti provides an operational monitoring and fault management framework. A reflected cross-site scripting vulnerability on the 1.3.x DEV branch allows attackers to obtain cookies of administrator and other users and fake their login using obtained cookies. This issue is fixed in commit...