SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2024:1947-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1947-1 advisory. - CVE-2024-2511: Fixed unconstrained session cache growth in TLSv1.3 bsc1222548. - CVE-2024-4603: Fixed DSA parameter checks for...

CVE-2024-1947

Removed by vendor...

GitLab 13.2.4 < 16.10.6 / 16.11 < 16.11.3 / 17.0 < 17.0.1 (CVE-2024-1947)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A denial of service DoS condition was discovered in GitLab CE/EE affecting all versions from 13.2.4 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1. By leveraging this vulnerability an...

CVE-2023-1947

The CVE-2023-1947 entry concerns taoCMS 3.0.2, where an unknown function in /admin/admin.php enables remote code injection. Multiple connected sources confirm a critical impact with remote access and code execution. Public exploit details exist, and advisories note that there is no confirmed fix ...

Amazon Linux 2 : ghostscript (ALAS-2023-1947)

The version of ghostscript installed on the remote host is prior to 9.25-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-1947 advisory. A heap-based buffer over write vulnerability was found in GhostScript's lp8000printpage function in gdevlp8k.c file. An attacker...

SUSE CVE-2016-1947

Mozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which makes it easier for remote attackers to trigger an unintended download by leveraging the absence of reputation data...

CVE-2022-1947

creationtimestamp| type| source ---|---|--- 2022-06-01 02:19:13+00:00| seen| https://t.me/cibsecurity/43590...

CVE-2022-1947

Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3...

CVE-2022-1947 Use of Incorrect Operator in polonel/trudesk

Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3...

CVE-2022-1947

The CVE-2022-1947 entry concerns polonel/trudesk before version 1.2.3, where an incorrect operator in the code leads to a security flaw. Public sources in the connected documents confirm the affected software and the root cause as an operator misuse in the application. Impact details from the CVE...

CVE-2022-1947 Use of Incorrect Operator in polonel/trudesk

Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3...

CVE-2021-1947

creationtimestamp| type| source ---|---|--- 2021-09-17 12:23:24+00:00| seen| https://t.me/cibsecurity/29029...

CVE-2021-1947

Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...

CVE-2021-1947

CVE-2021-1947 is a use-after-free in the kernel graphics driver caused by storing an invalid pointer inside Qualcomm Snapdragon components (Snapdragon Compute, Connectivity, Industrial IoT, Mobile, Wearables, Wired Infrastructure and Networking). The entry indicates a local, low-effort attack pat...

Advisory ROSA-SA-2021-1947

Software: pcre 8.32 OS: Cobalt 7.9 CVE-ID: CVE-2015-2327 CVE-Crit: MEDIUM CVE-DESC: PCRE before version 8.36 incorrectly handles the pattern / a \ 2 | a \ g / / and related patterns with certain internal recursive backlinks, allowing remote attackers to cause a denial of service segmentation erro...

CVE-2021-32928

The Sentinel LDK Run-Time Environment installer Versions 7.6 and prior adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networks using TCP Port 1947. While uninstalling, the uninstaller fails to close Port 1947...

CVE-2021-32928

The Sentinel LDK Run-Time Environment installer Versions 7.6 and prior adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networks using TCP Port 1947. While uninstalling, the uninstaller fails to close Port 1947...

CVE-2021-32928

The Sentinel LDK Run-Time Environment installer Versions 7.6 and prior adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networks using TCP Port 1947. While uninstalling, the uninstaller fails to close Port 1947...

CVE-2021-32928

The Sentinel LDK Run-Time Environment installer Versions 7.6 and prior adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networks using TCP Port 1947. While uninstalling, the uninstaller fails to close Port 1947...

CVE-2021-32928

The CVE-2021-32928 issue affects the Sentinel LDK Run-Time Environment (RTE) installer for version 7.6 and prior. The root cause is the installer adding a firewall rule named “Sentinel License Manager” that permits inbound connections from private networks on TCP port 1947, and the uninstaller fa...