6165 matches found
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update
An update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2024-3958 Improper Control of Generation of Code ('Code Injection') in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. An issue was found that allows someone to abuse a discrepancy between the Web application display and the git command line interface to social engineer victims into...
CVE-2024-7580
creationtimestamp| type| source ---|---|--- 2024-08-07 17:48:15+00:00| seen| https://t.me/cvedetector/2690...
CVE-2024-7266
creationtimestamp| type| source ---|---|--- 2024-08-07 13:37:34+00:00| seen| https://t.me/cvedetector/2678 2025-03-17 08:46:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7743...
Debian: Security Advisory (DSA-5738-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 5738-1] openjdk-17 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5738-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 06, 2024 https://www.debian.org/security/faq -...
Debian dsa-5738 : openjdk-17-dbg - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5738 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5738-1 [email protected]...
CVE-2024-6104 affecting package terraform for versions less than 1.3.2-17
CVE-2024-6104 affecting package terraform for versions less than 1.3.2-17. A patched version of the package is available...
USN-6931-1: OpenJDK 17 vulnerabilities
It was discovered that the Hotspot component of OpenJDK 17 was not properly bounding certain UTF-8 strings, which could lead to a buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2024-21131 It was discovered that the Hotspot...
SUSE SLED15: java-17-openjdk / java-17-openjdk-demo / java-17-openjdk-devel / etc (SUSE-SU-2024:2628-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2628-1 advisory. Updated to version 17.0.12+7 July 2024 CPU: - CVE-2024-21131: Fixed a potential UTF8 size overfl...
Ubuntu: Security Advisory (USN-6931-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : OpenJDK 17 vulnerabilities (USN-6931-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6931-1 advisory. It was discovered that the Hotspot component of OpenJDK 17 was not properly performing bounds when handling certain UTF-8 strings...
SUSE-SU-2024:2628-1 Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Updated to version 17.0.12+7 July 2024 CPU: - CVE-2024-21131: Fixed a potential UTF8 size overflow bsc1228046. - CVE-2024-21138: Fixed an infinite loop due to excessive symbol length bsc1228047. - CVE-2024-21140: Fixed a pre-loop limit...
CVE-2023-42957
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10. An app may be able to read sensitive location information...
CVE-2023-40396
The issue was addressed with improved memory handling. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17. An app may be able to execute arbitrary code with kernel privileges...
CVE-2023-42949
This issue was addressed with improved data protection. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17. An app may be able to access edited photos saved to a temporary directory...
CVE-2023-42957
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10. An app may be able to read sensitive location information...
CVE-2023-42957
CVE-2023-42957 affects Apple platforms (iOS, iPadOS, macOS Sonoma 14, watchOS 10). Root cause: a permissions issue that could allow an app to read sensitive location information. Impact: local, low-severity exposure (CVSSv3.1 base score 3.3). Fixes are implemented in iOS 17, iPadOS 17, macOS Sono...
