CVE-2024-39474 affecting package kernel for versions less than 5.15.162.2-1

CVE-2024-39474 affecting package kernel for versions less than 5.15.162.2-1. A patched version of the package is available...

CVE-2024-38577 affecting package kernel for versions less than 5.15.167.1-1

CVE-2024-38577 affecting package kernel for versions less than 5.15.167.1-1. A patched version of the package is available...

CVE-2024-38588 affecting package kernel for versions less than 5.15.162.2-1

CVE-2024-38588 affecting package kernel for versions less than 5.15.162.2-1. A patched version of the package is available...

CVE-2024-42078 affecting package kernel for versions less than 5.15.162.2-1

CVE-2024-42078 affecting package kernel for versions less than 5.15.162.2-1. A patched version of the package is available...

CVE-2024-39484 affecting package kernel for versions less than 5.15.162.2-1

CVE-2024-39484 affecting package kernel for versions less than 5.15.162.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-38571 affecting package kernel for versions less than 5.15.162.2-1

CVE-2024-38571 affecting package kernel for versions less than 5.15.162.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-39480 affecting package kernel for versions less than 5.15.162.2-1

CVE-2024-39480 affecting package kernel for versions less than 5.15.162.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-39292 affecting package kernel for versions less than 5.15.162.2-1

CVE-2024-39292 affecting package kernel for versions less than 5.15.162.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-2004 affecting package curl for versions less than 8.8.0-1

CVE-2024-2004 affecting package curl for versions less than 8.8.0-1. An upgraded version of the package is available that resolves this issue...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : curl vulnerability (USN-6944-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6944-1 advisory. Dov Murik discovered that curl incorrectly handled parsing ASN.1 Generalized Time fields. A remote attacker could use this issue to cause...

SUSE SLES12 Security Update : patch (SUSE-SU-2024:2704-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:2704-1 advisory. - CVE-2019-20633: Fixed double-free/OOB read in pch.c bsc1167721 Tenable has extracted the preceding description block directly from the SUS...

CVE-2024-4076 affecting package bind for versions less than 9.20.0-1

CVE-2024-4076 affecting package bind for versions less than 9.20.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-1737 affecting package bind for versions less than 9.20.0-1

CVE-2024-1737 affecting package bind for versions less than 9.20.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-0760 affecting package bind for versions less than 9.20.0-1

CVE-2024-0760 affecting package bind for versions less than 9.20.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-1975 affecting package bind for versions less than 9.20.0-1

CVE-2024-1975 affecting package bind for versions less than 9.20.0-1. An upgraded version of the package is available that resolves this issue...

XWiki 13.10.4 < 14.10.21, 15.0 < 15.5.5, 15.6-rc-1 < 15.10.6 Missing Authorization Vulnerability (GHSA-33gp-gmg3-hfpq)

Xwiki is prone to a missing authorization vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...

Ubuntu: Security Advisory (USN-6940-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XWiki 4.2-milestone-3 < 14.10.21, 15.0-rc-1 < 15.5.5, 15.6-rc-1 < 15.10.6, 16.0.0-rc-1 < 16.0.0 XSS Vulnerability (GHSA-wf3x-jccf-5g5g)

Xwiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...

XWiki 9.2-rc-1 < 14.10.21, 15.0-rc-1 < 15.5.5, 15.6-rc-1 < 15.10.2 RCE Vulnerability (GHSA-h63h-5c77-77p5)

Xwiki is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...

unread.today Cross Site Scripting vulnerability OBB-3952583

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...