OPENSUSE-SU-2024:10855-1 icedtea-web-1.8.6-1.3 on GA media

These are all security issues fixed in the icedtea-web-1.8.6-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11104-1 liboath-devel-2.6.7-1.3 on GA media

These are all security issues fixed in the liboath-devel-2.6.7-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11106-1 obs-service-source_validator-0.21-1.3 on GA media

These are all security issues fixed in the obs-service-sourcevalidator-0.21-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11405-1 libsrt1_4-1.4.3-1.3 on GA media

These are all security issues fixed in the libsrt14-1.4.3-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11188-1 postsrsd-1.11-1.3 on GA media

These are all security issues fixed in the postsrsd-1.11-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10751-1 feh-3.7-1.3 on GA media

These are all security issues fixed in the feh-3.7-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11186-1 postgresql12-12.8-1.3 on GA media

These are all security issues fixed in the postgresql12-12.8-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10794-1 glusterfs-9.1-1.3 on GA media

These are all security issues fixed in the glusterfs-9.1-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10718-1 discount-2.2.7-1.3 on GA media

These are all security issues fixed in the discount-2.2.7-1.3 package on the GA media of openSUSE Tumbleweed...

CrateDB has a Client initialized Session-Renegotiation DoS

Summary Client-Initiated TLS Renegotiation Denial of Service DoS Vulnerability at Port 4200 Details A high-risk vulnerability has been identified where the TLS endpoint port 4200 permits client-initiated renegotiation. In this scenario, an attacker can exploit this feature to repeatedly request...

GHSA-X268-QPG6-W9G2 CrateDB has a Client initialized Session-Renegotiation DoS

Summary Client-Initiated TLS Renegotiation Denial of Service DoS Vulnerability at Port 4200 Details A high-risk vulnerability has been identified where the TLS endpoint port 4200 permits client-initiated renegotiation. In this scenario, an attacker can exploit this feature to repeatedly request...

CVE-2024-37309

CrateDB is a distributed SQL database. A high-risk vulnerability has been identified in versions prior to 5.7.2 where the TLS endpoint port 4200 permits client-initiated renegotiation. In this scenario, an attacker can exploit this feature to repeatedly request renegotiation of security parameter...

CVE-2024-37309 Client initialized Session-Renegotiation DoS

CrateDB is a distributed SQL database. A high-risk vulnerability has been identified in versions prior to 5.7.2 where the TLS endpoint port 4200 permits client-initiated renegotiation. In this scenario, an attacker can exploit this feature to repeatedly request renegotiation of security parameter...

CVE-2024-37309 Client initialized Session-Renegotiation DoS

CrateDB is a distributed SQL database. A high-risk vulnerability has been identified in versions prior to 5.7.2 where the TLS endpoint port 4200 permits client-initiated renegotiation. In this scenario, an attacker can exploit this feature to repeatedly request renegotiation of security parameter...

Medium: openssl11

Issue Overview: Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem...

Boelter Blue System Management SQL Injection Vulnerability

Boelter Blue System Management is a mobile application from Boelter, Inc. Boelter Blue System Management version 1.3 suffers from a SQL injection vulnerability that originates from a vulnerability that allows an attacker to execute arbitrary SQL commands via affected parameters, which could lead ...

OpenSSL 1.0.2 < 1.0.2zc Vulnerability

The version of OpenSSL installed on the remote host is prior to 1.0.2zc. It is, therefore, affected by a vulnerability as referenced in the 1.0.2zc advisory. - There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS...

WordPress Download Attachments plugin <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Krzysztof Zając in WordPress Plugin Download Attachments versions = 1.3...

PT-2024-26438 · Unknown · Html2Xhtml

Name of the Vulnerable Software and Affected Versions: html2xhtml version 1.3 Description: A stack-buffer-overflow issue exists in the read charset decl function due to improper bounds checking when copying data into a fixed-size stack buffer. An attacker can exploit this by providing a specially...

SUSE SLED15: perl / perl-32bit / perl-base / perl-base-32bit / perl-core-DB_File / etc (SUSE-SU-2024:1762-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1762-1 advisory. Security issues fixed: - CVE-2018-6913: Fixed space calculation issues in pppack.c bsc1082216 -...