Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft USA. A security vulnerability exists in Microsoft Windows. An attacker exploiting this vulnerability could bypass certain features. The following products and versions are affected:Windows 10 Version 1809...

Debian dla-3885 : redis - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3885 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3885-1 [email protected]...

KB5043080: Windows 11 version 24H2 Security Update (September 2024)

The remote Windows host is missing security update 5043080. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 - Microsoft Management Console Remote Code Execution Vulnerability CVE-2024-38259 - Windows Remote Access Connection...

KB5043076: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (September 2024)

The remote Windows host is missing security update 5043076. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 - Microsoft Management Console Remote Code Execution Vulnerability CVE-2024-38259 - Windows Remote Access Connection...

Oracle Linux 7 : java-11-openjdk (ELSA-2024-4564)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-4564 advisory. - CVE-2024-21131 Improve-UTF8-String-supports - CVE-2024-21138 Better-symbol-storage - CVE-2024-21140 Improved-loop-handling - CVE-2024-21144...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to elevate privileges. The following products and versions are...

NewStart CGSL MAIN 6.02 : openssh Vulnerability (NS-SA-2024-0061)

The remote NewStart CGSL host, running version MAIN 6.02, has openssh packages installed that are affected by a vulnerability: - A vulnerability was found in OpenSSH. The PKCS11 feature in the ssh-agent in OpenSSH has an insufficiently trustworthy search path, leading to remote code execution if ...

[SECURITY] [DLA 3883-1] python-jwcrypto security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3883-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb September 09, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3882-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3882-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 09, 2024 https://wiki.debian.org/LTS -...

Debian dla-3883 : python3-jwcrypto - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-3883 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3883-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3884 : cacti - security update

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3884 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3884-1 [email protected]...

Debian dla-3882 : thunderbird - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3882 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3882-1 [email protected]...

java-11-openjdk security update

1:11.0.23.0.9-2.0.3 - Fixes below CVE's - CVE-2024-21131 Improve-UTF8-String-supports - CVE-2024-21138 Better-symbol-storage - Fixes malformed control flow openjdk bug8303466 - CVE-2024-21140 Improved-loop-handling - CVE-2024-21144 Enhance-Pack-200-loading - CVE-2024-21145 Improve-2D-image-handli...

Debian dla-3861 : exfatprogs - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-3861 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3861-1 [email protected] https://www.debian.org/lts/security/...

Debian: Security Advisory (DLA-3881-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-3879 : bluetooth - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3879 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3879-1 [email protected]...

Debian dla-3880 : amanda-client - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3880 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3880-1 [email protected]...

CVE-2022-27592

An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If exploited, the vulnerability could allow local authenticated administrators to execute unauthorized code or commands via unspecified vectors. We have already fixed the vulnerability in the following...

CVE-2022-27592 QVR Smart Client

An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If exploited, the vulnerability could allow local authenticated administrators to execute unauthorized code or commands via unspecified vectors. We have already fixed the vulnerability in the following...

CVE-2022-27592 QVR Smart Client

An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If exploited, the vulnerability could allow local authenticated administrators to execute unauthorized code or commands via unspecified vectors. We have already fixed the vulnerability in the following...