OPENSUSE-SU-2024:11407-1 ssh-audit-2.5.0-1.2 on GA media

These are all security issues fixed in the ssh-audit-2.5.0-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11920-1 cargo-audit-0.16.0~git0.625c965-3.1 on GA media

These are all security issues fixed in the cargo-audit-0.16.0git0.625c965-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13932-1 ssh-audit-3.2.0-1.1 on GA media

These are all security issues fixed in the ssh-audit-3.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10673-1 cargo-audit-advisory-db-20210802-1.2 on GA media

These are all security issues fixed in the cargo-audit-advisory-db-20210802-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11708-1 cargo-audit-advisory-db-20220105-1.1 on GA media

These are all security issues fixed in the cargo-audit-advisory-db-20220105-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12009-1 cargo-audit-advisory-db-20220420-1.1 on GA media

These are all security issues fixed in the cargo-audit-advisory-db-20220420-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10252-1 audit-devel-2.5-1.82 on GA media

These are all security issues fixed in the audit-devel-2.5-1.82 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13530-1 ssh-audit-3.1.0-1.1 on GA media

These are all security issues fixed in the ssh-audit-3.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13304-1 cargo-audit-advisory-db-20231007-1.1 on GA media

These are all security issues fixed in the cargo-audit-advisory-db-20231007-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13542-1 cargo-audit-advisory-db-20231219-1.1 on GA media

These are all security issues fixed in the cargo-audit-advisory-db-20231219-1.1 package on the GA media of openSUSE Tumbleweed...

audit bug fix and enhancement update

An update is available for audit. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.10...

CVE-2024-29169

Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal audit REST API. A remote authenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing...

CVE-2024-29169

Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal audit REST API. A remote authenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing...

Dell Secure Connect Gateway SQL Injection Vulnerability

Dell Secure Connect Gateway is a secure connectivity gateway from Dell, Inc. A SQL injection vulnerability exists in Dell Secure Connect Gateway versions prior to 5.22.00.00, which stems from a SQL injection in the Internal Audit REST API, which could be exploited by a remote attacker to execute...

PT-2024-22776 · Dell · Dell Scg

Name of the Vulnerable Software and Affected Versions: Dell SCG versions prior to 5.22.00.00 Description: The issue concerns a SQL Injection Vulnerability in the SCG UI for an internal audit REST API. A remote authenticated attacker could potentially exploit this vulnerability, leading to the...

go-grpc-compression has a zstd decompression bombing vulnerability

Impact A malicious user could cause a denial of service DoS when using a specially crafted gRPC request. The decompression mechanism for zstd did not respect the limits imposed by gRPC, allowing rapid memory usage increases. Versions v1.1.4 through to v1.2.2 made use of the Decoder.DecodeAll...

CVE-2024-34762

Vulnerability discovered by executing a planned security audit. Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WPENGINE INC Advanced Custom Fields PRO allows PHP Local File Inclusion.This issue affects Advanced Custom Fields PRO: from n/a before 6.2....

CVE-2024-34762 Wordpress Advanced Custom Fields Pro plugin < 6.2.10 - Contributor+ Local File Inclusion vulnerability

Vulnerability discovered by executing a planned security audit. Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WPENGINE INC Advanced Custom Fields PRO allows PHP Local File Inclusion.This issue affects Advanced Custom Fields PRO: from n/a before 6.2....

CVE-2024-34762

CVE-2024-34762 affects the WordPress plugin Advanced Custom Fields Pro (WP ACF Pro). The issue is an improper limitation of pathnames to a restricted directory, enabling PHP Local File Inclusion. Public details indicate impact up to versions prior to 6.2.10 (with some sources noting an authentica...

CVE-2024-34762 Wordpress Advanced Custom Fields Pro plugin < 6.2.10 - Contributor+ Local File Inclusion vulnerability

Vulnerability discovered by executing a planned security audit. Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WPENGINE INC Advanced Custom Fields PRO allows PHP Local File Inclusion.This issue affects Advanced Custom Fields PRO: from n/a before 6.2....