SUSE-SU-2024:4252-1 Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: Updated to Java 8.0 Service Refresh 8 Fix Pack 35 with Oracle October 15 2024 CPU bsc1232064: - CVE-2024-21208: Fixed partial DoS in component Networking bsc1231702,JDK-8328286 - CVE-2024-21210: Fixed unauthorized update, insert or delete...

CVE-2024-47430

creationtimestamp| type| source ---|---|--- 2024-11-12 22:15:35+00:00| seen| https://t.me/cvedetector/10729...

CVE-2024-10806

creationtimestamp| type| source ---|---|--- 2024-11-05 02:59:35+00:00| seen| https://t.me/cvedetector/9810...

CVE-2024-49366 Nginx UI's json field can construct a directory traversal payload, causing arbitrary files to be written

Nginx UI is a web user interface for the Nginx web server. Nginx UI v2.0.0-beta.35 and earlier gets the value from the json field without verification, and can construct a value value in the form of ../../. Arbitrary files can be written to the server, which may result in loss of permissions...

CVE-2024-49366: Improper Limitation of a Pathname to a Restricted Directory

Nginx UI is a web user interface for the Nginx web server. Nginx UI v2.0.0-beta.35 and earlier gets the value from the json field without verification, and can construct a value value in the form of ../../. Arbitrary files can be written to the server, which may result in loss of permissions...

Adobe Prelude < 8.1.1 Arbitrary code execution (APSB19-35)

The version of Adobe Prelude installed on the remote Windows host is prior to 8.1.1. It is, therefore, affected by a vulnerability as referenced in the APSB19-35 advisory. - Adobe Prelude CC versions 8.1 and earlier have an insecure library loading dll hijacking vulnerability. Successful...

Nginx UI 路径遍历漏洞

Nginx UI is a WebUI for Nginx by Jacky Personal Developer. A path traversal vulnerability exists in Nginx UI 2.0.0-beta.35 and earlier versions, which originates from obtaining a value from a json field without authentication, writing an arbitrary file to the server, and leading to loss of...

Adobe After Effects < 17.1.1 Multiple Arbitrary Code Execution (APSB20-35) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 17.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-35 advisory. - Adobe After Effects versions 17.1 and earlier have an out-of-bounds write vulnerability. Successful...

CVE-2024-49230

creationtimestamp| type| source ---|---|--- 2024-10-18 12:44:35+00:00| seen| https://t.me/cvedetector/8321...

CVE-2024-47326

creationtimestamp| type| source ---|---|--- 2024-10-06 14:02:35+00:00| seen| https://t.me/cvedetector/7142...

CVE-2024-45248 Multi-DNC – CWE-35: Path Traversal: '.../...//'

Multi-DNC – CWE-35: Path Traversal: '.../...//'...

CVE-2024-44023

creationtimestamp| type| source ---|---|--- 2024-10-05 16:17:35+00:00| seen| https://t.me/cvedetector/7070...

GHSA-G54F-66MW-HV66 Agnai vulnerable to Relative Path Traversal in Image Upload

Summary A vulnerability has been discovered in Agnai that permits attackers to upload image files at attacker-chosen location on the server. This issue can lead to image file uploads to unauthorized or unintended directories, including overwriting of existing images which may be used for...

GHSA-H355-HM5H-CM8H Agnai File Disclosure Vulnerability: JSON via Path Traversal

CWE-35: Path Traversal https://cwe.mitre.org/data/definitions/35.html CVSSv3.1 4.3 - Medium CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N Summary A vulnerability has been discovered in Agnai that permits attackers to read arbitrary JS...

CVE-2024-8941

creationtimestamp| type| source ---|---|--- 2024-09-25 04:16:35+00:00| seen| https://t.me/cvedetector/6247...

CVE-2024-31196

creationtimestamp| type| source ---|---|--- 2024-09-18 16:44:35+00:00| seen| https://t.me/cvedetector/5961...

CVE-2024-6482

creationtimestamp| type| source ---|---|--- 2024-09-14 15:41:35+00:00| seen| https://t.me/cvedetector/5673...

openSUSE Security Advisory (SUSE-SU-2024:3003-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-43787

creationtimestamp| type| source ---|---|--- 2024-08-22 07:04:45+00:00| published-proof-of-concept| https://github.com/honojs/hono/security/advisories/GHSA-rpfr-3m35-5vx5 2024-08-22 17:42:35+00:00| seen| https://t.me/cvedetector/3920...

SUSE SLES12: MozillaFirefox / MozillaFirefox-branding-SLE / MozillaFirefox-devel / etc (SUSE-SU-2024:2876-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2876-1 advisory. Update to Firefox Extended Support Release 128.1.0 ESR MFSA 2024-35, bsc1228648 - CVE-2024-7518: Fullscreen notification dialog can...