[SECURITY] Fedora 40 Update: java-latest-openjdk-23.0.2.0.7-1.rolling.fc40

The OpenJDK 23 runtime environment...

USN-7255-1: OpenJDK 23 vulnerability

It was discovered that the Hotspot component of OpenJDK 23 did not properly handle API access under certain circumstances. An unauthenticated attacker could possibly use this issue to access unauthorized resources and expose sensitive information...

Ubuntu 24.10 : OpenJDK 23 vulnerability (USN-7255-1)

The remote Ubuntu 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7255-1 advisory. It was discovered that the Hotspot component of OpenJDK 23 did not properly handle API access under certain circumstances. An unauthenticated attacker could possibly...

Security Bulletin: IBM Maximo Application Suite - AI Broker Component component uses spring-webmvc-6.1.12.jar which is vulnerable to this CVE-2024-38816

Summary Security Bulletin:IBM Maximo Application Suite - AI Broker Component component uses spring-webmvc-6.1.12.jar which is vulnerable to this CVE-2024-38816. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-38816 DESCRIPTION:...

CVE-2025-24356

fastd is a VPN daemon which tunnels IP packets and Ethernet frames over UDP. When receiving a data packet from an unknown IP address/port combination, fastd will assume that one of its connected peers has moved to a new address and initiate a reconnect by sending a handshake packet. This "fast...

PT-2025-5339 · Fastd +1 · Fastd +1

Name of the Vulnerable Software and Affected Versions: fastd versions prior to v23 Description: fastd is a VPN daemon that tunnels IP packets and Ethernet frames over UDP. When receiving a data packet from an unknown IP address/port combination, fastd initiates a reconnect by sending a handshake...

CVE-2023-32982

creationtimestamp| type| source ---|---|--- 2025-01-23 21:03:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2831...

CVE-2022-4218

creationtimestamp| type| source ---|---|--- 2025-01-23 21:03:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2828...

GHSA-GVRQ-CG5R-7CHP

creationtimestamp| type| source ---|---|--- 2025-01-23 21:03:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2823...

CVE-2023-32995

creationtimestamp| type| source ---|---|--- 2025-01-23 20:03:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2802...

CVE-2023-33002

creationtimestamp| type| source ---|---|--- 2025-01-23 16:02:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2754...

CVE-2023-32997

creationtimestamp| type| source ---|---|--- 2025-01-23 16:02:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2746...

PT-2025-1981 · Asus · Armoury Crate

The Armoury Crate App is affected by a file handling command issue that can lead to arbitrary file deletion. The affected software is Armoury Crate, and an exploit for this issue is available. Unfortunately, the specific versions of Armoury Crate that are affected are not specified. More...

CVE-2024-57937

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

KLA79208 Multiple vulnerabilities in Oracle Java

Multiple vulnerabilities were found in Oracle Java. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability can be exploited remotely to execut...

GHSA-MRHP-WFP2-59H5

creationtimestamp| type| source ---|---|--- 2025-01-08 18:31:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113794159931596292 2025-01-08 20:30:50+00:00| published-proof-of-concept| Telegram/pCWefAz8NgtMQjK60Nt8tRL1XwN3sMZOhKLlzwYzNuYpUw4...

CVE-2024-56331

CVE-2024-56331 affects Uptime Kuma’s real-browser monitor, enabling Local File Inclusion via file:/// URLs. The vulnerability arises from insufficient server-side validation of the URL input, allowing an authenticated user to trigger the browser to fetch and capture local files (e.g., /etc/passwd...

AZL-54531 CVE-2024-45338 affecting package kubevirt for versions less than 0.59.0-23

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

JDK: Array indexing integer overflow (8328544)

Vulnerability in Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and 23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java...

SUSE SLES15 Security Update : kernel (Live Patch 23 for SLE 15 SP4) (SUSE-SU-2024:4234-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4234-1 advisory. This update for the Linux Kernel 5.14.21-15040024108 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use...