OPENSUSE-SU-2024:12967-1 frr-8.4-4.1 on GA media

These are all security issues fixed in the frr-8.4-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11879-1 libQt5Bootstrap-devel-static-32bit-5.15.2+kde294-4.1 on GA media

These are all security issues fixed in the libQt5Bootstrap-devel-static-32bit-5.15.2+kde294-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10571-1 clamav-0.99.2-4.1 on GA media

These are all security issues fixed in the clamav-0.99.2-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10144-1 python-suds-jurko-0.6-4.1 on GA media

These are all security issues fixed in the python-suds-jurko-0.6-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12502-1 python38-3.8.15-4.1 on GA media

These are all security issues fixed in the python38-3.8.15-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11750-1 ncat-7.92-4.1 on GA media

These are all security issues fixed in the ncat-7.92-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13294-1 glibc-2.38-4.1 on GA media

These are all security issues fixed in the glibc-2.38-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11865-1 apr-devel-1.7.0-4.1 on GA media

These are all security issues fixed in the apr-devel-1.7.0-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13627-1 libtiff-devel-32bit-4.6.0-4.1 on GA media

These are all security issues fixed in the libtiff-devel-32bit-4.6.0-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13665-1 libsystemd0-254.8-4.1 on GA media

These are all security issues fixed in the libsystemd0-254.8-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11636-1 gmp-devel-32bit-6.2.1-4.1 on GA media

These are all security issues fixed in the gmp-devel-32bit-6.2.1-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13635-1 python3-onionshare-2.6-4.1 on GA media

These are all security issues fixed in the python3-onionshare-2.6-4.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-27260

IBM AIX could 7.2, 7.3, VIOS 3.1, and VIOS 4.1 allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 283985...

Security Bulletin: AIX is vulnerable to arbitrary command execution due to invscout (CVE-2024-27260)

Summary A vulnerability in the AIX invscout command could allow a non-privileged local user to execute arbitrary commands CVE-2024-27260. Vulnerability Details CVEID:CVE-2024-27260 DESCRIPTION: IBM AIX could allow a non-privileged local user to exploit a vulnerability in the invscout command to...

CVE-2024-27273

IBM AIX's Unix domain AIX 7.2, 7.3, VIOS 3.1, and VIOS 4.1 datagram socket implementation could potentially expose applications using Unix domain datagram sockets with SOPEERID operation and may lead to privilege escalation. IBM X-Force ID: 284903...

Security Bulletin: AIX is vulnerable to privilege escalation (CVE-2024-27273)

Summary Vulnerability in the AIX kernel may lead to privilege escalation CVE-2024-27273. Vulnerability Details CVEID:CVE-2024-27273 DESCRIPTION: IBM AIX's Unix domain datagram socket implementation could potentially expose applications using Unix domain datagram sockets with SOPEERID operation an...

AIX is vulnerable to arbitrary code execution due to RPM (CVE-2023-7104)

IBM SECURITY ADVISORY First Issued: Wed Apr 24 15:34:58 CDT 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/rpmadvisory2.asc Security Bulletin: AIX is vulnerable to arbitrary code execution due to RPM CVE-2023-7104...

CVE-2024-32833

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nick Halsey List Custom Taxonomy Widget allows Stored XSS.This issue affects List Custom Taxonomy Widget: from n/a through 4.1...

PT-2024-24459 · Wuzhicms · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHICMS version 4.1.0 Description: A stored cross-site scripting issue in the component afficheadminindex.php allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the formdata parameter...

PT-2024-23476 · Pixelite · Login With Ajax

Name of the Vulnerable Software and Affected Versions: Login With Ajax versions n/a through 4.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in Pixelite Login With Ajax. This type of vulnerability allows an attacker to trick a user into performing unintended actions o...