10431 matches found
SUSE SLED15: ffmpeg-4 / ffmpeg-4-libavcodec-devel / ffmpeg-4-libavdevice-devel / etc (SUSE-SU-2024:3358-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3358-1 advisory. - Dropped support for libmfx to fix the following CVEs: libmfx: improper input validation...
SUSE-SU-2024:3358-1 Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - Dropped support for libmfx to fix the following CVEs: libmfx: improper input validation CVE-2023-48368, bsc1226897 libmfx: improper buffer restrictions CVE-2023-45221, bsc1226898 libmfx: out-of-bounds read CVE-2023-22656, bsc1226899 libmfx:...
CVE-2024-46983 Remote Command Execution(RCE) Vulnerbility in sofa-hessian
sofa-hessian is an internal improved version of Hessian3/4 powered by Ant Group CO., Ltd. The SOFA Hessian protocol uses a blacklist mechanism to restrict deserialization of potentially dangerous classes for security protection. But there is a gadget chain that can bypass the SOFA Hessian blackli...
SUSE SLED15: ffmpeg-4 / ffmpeg-4-libavcodec-devel / ffmpeg-4-libavdevice-devel / etc (SUSE-SU-2024:3301-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3301-1 advisory. - CVE-2024-7055: Fixed a heap-based buffer overflow in pnmdec. bsc1229026 Tenable has extracted the...
SUSE-SU-2024:3301-1 Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2024-7055: Fixed a heap-based buffer overflow in pnmdec. bsc1229026...
[SECURITY] [DLA 3890-1] galera-4 new upstream version
------------------------------------------------------------------------- Debian LTS Advisory DLA-3890-1 [email protected] https://www.debian.org/lts/security/ Otto Kekäläinen September 17, 2024 https://wiki.debian.org/LTS -...
Debian dla-3890 : galera-4 - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3890 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3890-1 [email protected] https://www.debian.org/lts/security/...
Directory traversal in the FileSelector widget
Date : 2024-09-17 CVE ID : CVE-2024-45604 Description Back end users can list files outside their file mounts or the document root in the FileSelector widget. However, it is not possible to edit these files or view their content. Affected versions Contao 4.0 Contao 4.1 Contao 4.2 Contao 4.3 Conta...
DLA-3890-1 galera-4 - new upstream version
Bulletin has no description...
RHSA-2024:2777 Red Hat Security Advisory: squid:4 security update
Bulletin has no description...
RHSA-2024:0397 Red Hat Security Advisory: squid:4 security update
Bulletin has no description...
RHSA-2022:6774 Red Hat Security Advisory: squid:4 security update
Bulletin has no description...
RHSA-2021:2025 Red Hat Security Advisory: squid:4 security update
Bulletin has no description...
RHSA-2017:1840 Red Hat Security Advisory: devtoolset-4-jackson-databind security update
Bulletin has no description...
RHSA-2008:0173 Red Hat Security Advisory: Red Hat Directory Server 7.1 Service Pack 4 security update
Bulletin has no description...
Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.16.0 release
Red Hat OpenShift Dev Spaces 3.16 has been released. All containers have been updated to include feature enhancements, bug fixes and CVE fixes. Following the Red Hat Product Security standards this update is rated as having a security impact of Important. The Common Vulnerability Scoring System...
CVE-2024-44121
Under certain conditions Statutory Reports in SAP S/4 HANA allows an attacker with basic privileges to access information which would otherwise be restricted. The vulnerability could expose internal user data that should remain confidential. It does not impact the integrity and availability of th...
CVE-2024-44121 Information Disclosure in SAP S/4 HANA (Statutory Reports)
Under certain conditions Statutory Reports in SAP S/4 HANA allows an attacker with basic privileges to access information which would otherwise be restricted. The vulnerability could expose internal user data that should remain confidential. It does not impact the integrity and availability of th...
CVE-2024-44121
The CVE-2024-44121 entry describes an information-disclosure vulnerability in SAP S/4HANA Statutory Reports that, under certain conditions, allows a user with basic privileges to access restricted internal data. Affected software is SAP S/4HANA (Statutory Reports) with confidentiality impact note...
EulerOS 2.0 SP12 : libtiff (EulerOS-SA-2024-2353)
According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw...