Oracle Linux 8 : container-tools:4.0 (ELSA-2024-2084)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-2084 advisory. buildah 1.24.7-1 - bump to v1.24.7 - Resolves: RHEL-26767 cockpit-podman conmon containernetworking-plugins containers-common container-selinux criu crun...

Moderate Photon OS Security Update - PHSA-2024-4.0-0596

Updates of 'linux-aws' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-4.0-0594

Updates of 'glibc' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-4.0-0593

Updates of 'squid' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2024-4.0-0592

Updates of 'linux-rt', 'openssl', 'wireshark', 'linux-aws', 'linux-secure', 'linux', 'suricata', 'libvirt', 'ruby' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2024-4.0-0591

Updates of 'linux-rt', 'util-linux', 'linux-aws', 'linux-secure', 'linux', 'nghttp2', 'iperf', 'bluez', 'httpd' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-4.0-0589

Updates of 'go' packages of Photon OS have been released...

CVE-2024-31011

Arbitrary file write vulnerability in beescms v.4.0, allows a remote attacker to execute arbitrary code via a file path that was not isolated and the suffix was not verified in admintemplate.php...

CVE-2024-31011

Arbitrary file write vulnerability in beescms v.4.0, allows a remote attacker to execute arbitrary code via a file path that was not isolated and the suffix was not verified in admintemplate.php...

CVE-2024-31011

CVE-2024-31011 affects beescms v4.0, where an Arbitrary file write vulnerability exists in admin_template.php due to a file path that was not isolated and an unverified suffix. This allows a remote attacker to write arbitrary files and, as described, execute arbitrary code. The impact is consiste...

CVE-2024-31011

Arbitrary file write vulnerability in beescms v.4.0, allows a remote attacker to execute arbitrary code via a file path that was not isolated and the suffix was not verified in admintemplate.php...

beescms 安全漏洞

BEESCMS is a PHP and MySQL based, scalable Content Management System CMS. A security vulnerability exists in beescms version v.4.0, which originates from an arbitrary file write vulnerability in admintemplate.php...

Moderate Photon OS Security Update - PHSA-2024-4.0-0588

Updates of 'linux', 'linux-aws', 'linux-rt', 'linux-secure' packages of Photon OS have been released...

PT-2024-21236 · Dell · Dell Openmanage Enterprise

Name of the Vulnerable Software and Affected Versions: Dell OpenManage Enterprise versions 4.0 and prior Description: The issue allows an unauthenticated remote attacker to potentially exploit a path traversal vulnerability, gaining unauthorized access to files stored on the server filesystem wit...

Important Photon OS Security Update - PHSA-2024-4.0-0586

Updates of 'linux-rt', 'nodejs', 'linux-aws', 'python3-cryptography', 'linux', 'linux-secure', 'bluez' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-4.0-0584

Updates of 'linux-rt', 'linux-aws', 'nss', 'linux-secure', 'file' packages of Photon OS have been released...

CVE-2024-2911

A vulnerability, which was classified as problematic, was found in Tianjin PubliCMS 4.0.202302.e. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The...

CVE-2024-2015

A vulnerability, which was classified as critical, has been found in ZhiCms 4.0. This issue affects the function getindexdata of the file app/index/controller/mcontroller.php. The manipulation of the argument key leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-2016

A vulnerability, which was classified as critical, was found in ZhiCms 4.0. Affected is the function index of the file app/manage/controller/setcontroller.php. The manipulation of the argument sitename leads to code injection. It is possible to launch the attack remotely. The exploit has been...

BIT-MONGODB-2020-7929 Specially crafted regex query can cause DoS

A user authorized to perform database queries may trigger denial of service by issuing specially crafted query contain a type of regex. This issue affects MongoDB Server v3.6 versions prior to 3.6.21 and MongoDB Server v4.0 versions prior to 4.0.20...