Fedora 40 : podman (2024-20393c122f)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-20393c122f advisory. Security fix for CVE-2024-3727 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

AZL-42340 CVE-2024-3727 affecting package cri-o for versions less than 1.22.3-3

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks...

CVE-2024-3727 vulnerabilities

Vulnerabilities for packages: buildah, skopeo, zot...

CVE-2024-3727 vulnerabilities

Vulnerabilities for packages: buildah, zot, skopeo...

AZL-42331 CVE-2024-3727 affecting package skopeo for versions less than 1.14.2-4

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks...

AZL-44970 CVE-2024-3727 affecting package buildah for versions less than 1.41.4-2

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks...

CVE-2024-3727

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks...

SUSE CVE-2024-3727

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks...

BELL-CVE-2024-3727

Bulletin has no description...

openSUSE: Security Advisory for chromium (openSUSE-SU-2023:0193-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : libqb (SUSE-SU-2023:3727-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:3727-1 advisory. - CVE-2023-39976: Fixed potential buffer overflow with long log messages bsc1214066. Tenable has extracted the preceding description block directly fro...

CVE-2023-3727

Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-3727

Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-3727

Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-3727

Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-3727

CVE-2023-3727 is a use-after-free in WebRTC of Google Chrome/Chromium, potentially enabling remote heap corruption in versions before 115.0.5790.98. Affected product: Google Chrome (Chromium-based). Impact: high severity; remote attacker could exploit to compromise memory. Remediation: update to ...

Chromium: CVE-2023-3727 Use after free in WebRTC

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

KLA51267 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Web API Permission...

Microsoft Edge (Chromium) < 114.0.1901.183 / 115.0.1901.183 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 114.0.1901.183 / 115.0.1901.183. It is, therefore, affected by multiple vulnerabilities as referenced in the July 21, 2023 advisory. - Microsoft Edge Chromium-based Spoofing Vulnerability CVE-2023-35392 - Microsoft Edg...

[SECURITY] [DSA 5456-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5456-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 20, 2023 https://www.debian.org/security/faq -...