3507 matches found
Important Photon OS Security Update - PHSA-2024-5.0-0250
Updates of 'glibc' packages of Photon OS have been released...
Fedora 39 : python-django (2024-2ec03ca8cb)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-2ec03ca8cb advisory. Security fix for CVE-2024-24680 and CVE-2024-27351 Tenable has extracted the preceding description block directly from the Fedora security advisory...
Moderate Photon OS Security Update - PHSA-2024-5.0-0248
Updates of 'linux-secure', 'linux-esx', 'linux', 'linux-rt' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2024-5.0-0247
Updates of 'ruby' packages of Photon OS have been released...
XWiki 5.0-rc-1 < 14.10.19, 15.0-rc-1 < 15.5.4, 15.6-rc-1 < 15.9 Information Disclosure Vulnerability (GHSA-v782-xr4w-3vqx)
Xwiki is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...
Critical Photon OS Security Update - PHSA-2024-5.0-0245
Updates of 'linux', 'wireshark', 'linux-secure', 'linux-esx', 'linux-rt' packages of Photon OS have been released...
CVE-2024-31465 XWiki Platform: Remote code execution from account via SearchSuggestSourceSheet
XWiki Platform is a generic wiki platform. Starting in version 5.0-rc-1 and prior to versions 14.10.20, 15.5.4, and 15.9-rc-1, any user with edit right on any page can execute any code on the server by adding an object of type XWiki.SearchSuggestSourceClass to their user profile or any other page...
PT-2024-22350 · Contao · Contao
Name of the Vulnerable Software and Affected Versions: Contao versions 4.9.0 through 4.13.39 Contao versions 5.0.0 through 5.3.3 Description: The issue arises when checking for broken links on protected pages, causing Contao to send the cookie header to external URLs. The passed options for the...
Mageia: Security Advisory (MGASA-2024-0075)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important Photon OS Security Update - PHSA-2024-5.0-0238
Updates of 'bluez' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2024-5.0-91-0238
Updates of 'bluez' packages of Photon OS have been released...
CVE-2024-25962
Dell InsightIQ, version 5.0, contains an improper access control vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to monitoring data...
CVE-2024-25962
Dell InsightIQ 5.0 has an improper access control vulnerability that could allow a remote low-privileged attacker to gain unauthorized access to monitoring data. The root cause is an incorrect access control mechanism within the application. Documented impacts include potential exposure of monito...
CVE-2024-25962
Dell InsightIQ, version 5.0, contains an improper access control vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to monitoring data...
CVE-2024-25962
Dell InsightIQ, version 5.0, contains an improper access control vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to monitoring data...
Important Photon OS Security Update - PHSA-2024-5.0-0233
Updates of 'curl' packages of Photon OS have been released...
Moderate Photon OS Security Update - PHSA-2024-5.0-0232
Updates of 'linux-secure', 'linux-esx', 'linux', 'linux-rt' packages of Photon OS have been released...
UBUNTU-CVE-2024-29041
Express.js minimalist web framework for node. Versions of Express.js prior to 4.19.0 and all pre-release alpha and beta versions of 5.0 are affected by an open redirect vulnerability using malformed URLs. When a user of Express performs a redirect using a user-provided URL Express performs an...
CVE-2024-29041
Express.js minimalist web framework for node. Versions of Express.js prior to 4.19.0 and all pre-release alpha and beta versions of 5.0 are affected by an open redirect vulnerability using malformed URLs. When a user of Express performs a redirect using a user-provided URL Express performs an...