[SECURITY] Fedora 39 Update: rust-tonic-build-0.12.3-1.fc39

Codegen module of tonic gRPC implementation...

CVE-2024-49389

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49386

Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49386

The CVE-2024-49386 entry affects Acronis Cyber Files (Windows) prior to build 9.0.0x24. The vulnerability stems from spell-jacking, leading to sensitive information disclosure (confidentiality impact HIGH; integrity/availability not affected per the provided sources). No exploitation details are ...

CVE-2024-49389

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49389

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49389

CVE-2024-49389 affects Acronis Cyber Files (Windows) prior to build 9.0.0x24. The vulnerability stems from insecure folder permissions that enable local privilege escalation. Affected component is the file system/installation directory permissions which, when exploited, grant high integrity, conf...

CVE-2024-49391

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49392

Stored cross-site scripting XSS vulnerability on enrollment invitation page. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities

Summary Multiple vulnerabilities were remediated in IBM Observability with Instana OnPrem build 283 Vulnerability Details CVEID:CVE-2022-40897 DESCRIPTION: Pypa Setuptools is vulnerable to a denial of service, caused by improper input validation. By sending request with a specially crafted regula...

Moderate: Red Hat Security Advisory: OpenJDK 21.0.5 Security Update for Portable Linux Builds

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

CVE-2024-9348

Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view...

Moderate: Red Hat Security Advisory: OpenJDK 17.0.13 Security Update for Windows Builds

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

CVE-2024-9348 Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view

Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view...

CVE-2024-9348

Docker Desktop is affected by CVE-2024-9348 on versions prior to 4.34.3. The issue is a remote code execution (RCE) vulnerability caused by unsanitized GitHub source links in the Build view, allowing an attacker to execute arbitrary code. Public sources across Nessus plug‑ins, CVELIST, CNNVD, and...

CVE-2024-9348 Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view

Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view...

CVE-2024-9348: Improper Input Validation

Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view...

PT-2024-35540

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns memory leaks in the Linux kernel, specifically in the iio gts build avail scale table function. If per time scalesi or per time gainsi kcalloc fails in the for loop, t...

BYOB Unauthenticated Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'sqlite3' class MetasploitModule 'BYOB Unauthenticated RCE via Arbitrary File Write and Command Injection CVE-2024-45256, CVE-2024-45257', 'Description' = %q Thi...

Qnap QTS Cleartext Transmission of Sensitive Information (CVE-2018-19944)

A cleartext transmission of sensitive information vulnerability has been reported to affect certain QTS devices. If exploited, this vulnerability allows a remote attacker to gain access to sensitive information. QNAP have already fixed this vulnerability in the following versions: QTS 4.4.3.1354...