305 matches found
Fedora 41 : python-webob (2024-b4c4fd0879)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-b4c4fd0879 advisory. Automatic update for python-webob-1.8.8-1.fc41. Changelog Thu Aug 15 2024 Jn ONDREJ SAL - 1.8.8-1 - Update to upstream. Fix open redirect issue in 1.8-branch...
Fedora 37 : pypy3.7 (2022-a36a18c9a8)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-a36a18c9a8 advisory. Automatic update for pypy3.7-7.3.9-2.3.7.fc37. Changelog Tue Jun 28 2022 Charalampos Stratakis - 7.3.9-2.3.7 - Security fix for CVE-2015-20107 - Fixes:...
Fedora 41 : rclone (2024-3ef0d3c37d)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-3ef0d3c37d advisory. Automatic update for rclone-1.67.0-1.fc41. Changelog Fri Aug 9 2024 Mikel Olasagasti Uranga - 1.67.0-1 - Update to 1.67.0 - Closes rhbz2251762...
Fedora 37 : graphviz (2022-e715590b2d)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-e715590b2d advisory. Automatic update for graphviz-5.0.0-1.fc37. Changelog Tue Jul 12 2022 Jaroslav karvada - 5.0.0-1 - New version Resolves: rhbz2105006 Sun Jul 10 2022...
Fedora 38 : pypy3.8 (2022-8072014f7b)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-8072014f7b advisory. Automatic update for pypy3.8-7.3.9-5.3.8.fc38. Changelog Mon Oct 10 2022 Lumr Balhar - 7.3.9-5.3.8 - Backport fix for CVE-2021-28861 Resolves: rhbz2120788...
Fedora 41 : libtiff (2024-f19c79e713)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-f19c79e713 advisory. Automatic update for libtiff-4.6.0-6.fc41. Changelog Wed Aug 14 2024 Michal Hlavinka - 4.6.0-6 - fix CVE-2024-7006 rhbz2302997 - fix CVE-2023-52356...
Fedora 38 : dhcp (2022-5c58ef733f)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-5c58ef733f advisory. Automatic update for dhcp-4.4.3-4.P1.fc38. Changelog Wed Oct 5 2022 Martin Osvald - 12:4.4.3-4.P1 - New version 4.4.3-P1 rhbz2132240 - Fix for...
Fedora 36 : python-django (2022-4094ccf096)
The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-4094ccf096 advisory. Automatic update for python-django-4.0.2-1.fc36. Changelog Wed Feb 2 2022 Matthias Runge - 4.0.2-1 - rebase to 4.0.2, fix for CVE-2022-22818...
WordPress Plugin Jetpack Patches Major Vulnerability Affecting 27 Million Sites
The maintainers of the Jetpack WordPress plugin have released a security update to remediate a critical vulnerability that could allow logged-in users to access forms submitted by others on a site. Jetpack, owned by WordPress maker Automattic, is an all-in-one plugin that offers a comprehensive...
iPhone flaw could read your saved passwords out loud. Update now!
Apple has issued security updates for iOS 18.0.1 and iPadOS 18.0.1 which includes a fix for a bug that could allow a user's saved passwords to be read aloud by its VoiceOver feature. VoiceOver allows users to use their iPhone or iPad even if they can't see the screen. It gives audible description...
Fedora: Security Advisory (FEDORA-2023-3256575fc8)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2023-1bbea3700b)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 40 : buildah (2024-77a0ab280f)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-77a0ab280f advisory. Security fix for CVE-2024-3727 Automatic update for buildah-1.35.4-1.fc40. Changelog for buildah Fri May 10 2024 Packit - 1.35.4-1 - Update to 1.35.4 upstrea...
Update now! JetBrains TeamCity vulnerability abused at scale
JetBrains issued a warning on March 4, 2024 about two serious vulnerabilities in TeamCity server. The flaws can be used by a remote, unauthenticated attacker with HTTPS access to a TeamCity on-premises server to bypass authentication checks and gain administrative control of the TeamCity server...
CVE-2023-2626
There exists an authentication bypass vulnerability in OpenThread border router devices and implementations. This issue allows unauthenticated nodes to craft radio frames using “Key ID Mode 2”: a special mode using a static encryption key to bypass security checks, resulting in arbitrary IP packe...
CVE-2023-2626
There exists an authentication bypass vulnerability in OpenThread border router devices and implementations. This issue allows unauthenticated nodes to craft radio frames using “Key ID Mode 2”: a special mode using a static encryption key to bypass security checks, resulting in arbitrary IP packe...
Authentication flaw
There exists an authentication bypass vulnerability in OpenThread border router devices and implementations. This issue allows unauthenticated nodes to craft radio frames using “Key ID Mode 2”: a special mode using a static encryption key to bypass security checks, resulting in arbitrary IP packe...
CVE-2023-2626 Authentication Bypass in OpenThread Boarder Router devices
There exists an authentication bypass vulnerability in OpenThread border router devices and implementations. This issue allows unauthenticated nodes to craft radio frames using “Key ID Mode 2”: a special mode using a static encryption key to bypass security checks, resulting in arbitrary IP packe...
Urgent WordPress Update Fixes Critical Flaw in Jetpack Plugin on Million of Sites
WordPress has issued an automatic update to address a critical flaw in the Jetpack plugin that's installed on over five million sites. The vulnerability, which was unearthed during an internal security audit, resides in an API present in the plugin since version 2.0, which was released in Novembe...