RHSA-2022:0496 Red Hat Security Advisory: .NET 6.0 security and bugfix update

Bulletin has no description...

RHEA-2014:1175 Red Hat Enhancement Advisory: Release of Satellite 6.0

Bulletin has no description...

WordPress Bit File Manager plugin 6.0-6.5.5 - Unauthenticated Remote Code Execution via Race Condition vulnerability

Unauthenticated Remote Code Execution via Race Condition vulnerability discovered by TANG Cheuk Hei siunam in WordPress Plugin Bit File Manager versions 6.0-6.5.5...

Exploit for CVE-2024-24809

CVE-2024-24809 Detail Description Traccar is an open sourc...

UBUNTU-CVE-2024-43442

Improper Neutralization of Input done by an attacker with admin privileges 'Cross-site Scripting' in OTRS System Configuration modules and OTRS Community Edition allows Cross-Site Scripting XSS within the System Configuration targeting other admins. This issue affects: OTRS from 7.0.X through...

PT-2024-5943 · Otrs · Otrs

Name of the Vulnerable Software and Affected Versions: OTRS versions 7.0.X through 7.0.50 OTRS version 8.0.X OTRS version 2023.X OTRS versions 2024.X through 2024.5.X OTRS Community Edition version 6.0.x Description: The issue exists due to improper neutralization of input, allowing an attacker...

CVE-2024-37392

A stored Cross-Site Scripting XSS vulnerability has been identified in SMSEagle software version 6.0. The vulnerability arises because the application did not properly sanitize user input in the SMS messages in the inbox. This could allow an attacker to inject malicious JavaScript code into an SM...

CVE-2024-39744 IBM Sterling Connect:Direct Web Services cross-site request forgery

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

PT-2024-28660 · Ibm · Ibm Sterling Connect:Direct Web Services

Name of the Vulnerable Software and Affected Versions: IBM Sterling Connect:Direct Web Services versions 6.0 through 6.3 Description: The issue is caused by the failure to properly enable HTTP Strict Transport Security, allowing a remote attacker to obtain sensitive information using...

Oracle Siebel CRM SEoL (6.0.x)

According to its version, Oracle Siebel CRM is 6.0.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...

PT-2024-28659 · Ibm · Ibm Sterling Connect:Direct Web Services

Name of the Vulnerable Software and Affected Versions: IBM Sterling Connect:Direct Web Services versions 6.0 through 6.3 Description: The issue concerns the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations...

CVE-2024-7272

A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fillaudiodata of the file /libswresample/swresample.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. This issue was fixed in versio...

CVE-2024-7272 FFmpeg swresample.c fill_audiodata heap-based overflow

A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fillaudiodata of the file /libswresample/swresample.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. This issue was fixed in versio...

CVE-2024-7272 FFmpeg swresample.c fill_audiodata heap-based overflow

A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fillaudiodata of the file /libswresample/swresample.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. This issue was fixed in versio...

Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2024-685)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-685 advisory. .NET and Visual Studio Denial of Service Vulnerability CVE-2024-38095 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that Nessus has not...

Security Bulletin: IBM Storage Ceph is vulnerable to the Improper Restriction of Operations within Memory Buffer in the RHEL UBI (CVE-2023-1255, CVE-2023-2650)

Summary RHEL UBI is used by IBM Storage Ceph as the base operating system. This bulletin identifies the steps to take to address the vulnerability in the RHEL UBI. CVE-2023-1255, CVE-2023-2650. Vulnerability Details CVEID:CVE-2023-1255 DESCRIPTION: OpenSSL is vulnerable to a denial of service,...

Fedora 40 : dotnet6.0 (2024-93b1d814a0)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-93b1d814a0 advisory. This is the July 2024 security update for .NET 6. Release Notes - SDK: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.32/6.0.132.md - Runtime...

Internal Error 2869 when Installing Hotfixes on XenApp 6.x

Errors occur when installing hotfixes on a XenApp 6.0 server usingthe manual method. The manual installation method included: Right-clicking on the .msp hotfix package and selecting Apply Double-clicking on the .msp hotfix package The errordisplayed is a message box with the following dialog:...

XenApp Error: Citrix Servers Reported That They are Too Busy to Provide Access to the Selected Resource

On attempting to launch any published application from a XenApp 6.0 server, the server reports that it is too busy to provide access to the selected resource. The application event log contains the following entry: The Citrix servers reported that they are too busy to provide access to the select...

AlmaLinux 8 : dotnet6.0 (ALSA-2024:4438)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:4438 advisory. dotnet: DoS when parsing X.509 Content and ObjectIdentifiers CVE-2024-38095 Tenable has extracted the preceding description block directly from the AlmaLinux...