CVE-2024-10134

creationtimestamp| type| source ---|---|--- 2024-10-19 12:59:09+00:00| seen| https://t.me/cvedetector/8358 2024-10-19 15:27:50+00:00| seen| https://t.me/HackerArsenal/565...

[SECURITY] Fedora 40 Update: rust-tower-0.5.1-1.fc40

Tower is a library of modular and reusable components for building robust clients and servers...

[SECURITY] Fedora 39 Update: rust-tower0.4-0.4.13-1.fc39

Tower is a library of modular and reusable components for building robust clients and servers...

[SECURITY] Fedora 39 Update: rust-tower-0.5.1-1.fc39

Tower is a library of modular and reusable components for building robust clients and servers...

CVE-2023-32189 Insecure handling SSH key in SUSE Manager when bootstrapping new clients

Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys...

Qnap QTS Bash OS Command Injection (CVE-2014-7169)

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the...

Qnap QTS Cleartext Transmission of Sensitive Information (CVE-2023-34972)

A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to read the contents of unexpected sensitive data via unspecified vectors. We have already fixed the...

CVE-2024-47080 matrix-js-sdk keys sent via `sendSharedHistoryKeys` vulnerable to interception by malicious homeserver

matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript. In matrix-js-sdk versions versions 9.11.0 through 34.7.0, the method MatrixClient.sendSharedHistoryKeys is vulnerable to interception by malicious homeservers. The method was introduced by MSC3061 and is commonly used to...

[SECURITY] Fedora 41 Update: rust-tower-0.5.1-1.fc41

Tower is a library of modular and reusable components for building robust clients and servers...

[SECURITY] Fedora 41 Update: rust-tower-http0.5-0.5.2-1.fc41

Tower middleware and utilities for HTTP clients and servers...

SpiceDB 安全漏洞

SpiceDB is a fine-grained permissions database from the Authzed team. SpiceDB has a security vulnerability that stems from the ability to grant inappropriate permissions to clients under certain circumstances...

Amazon Linux 2023 : openssl, openssl-devel, openssl-libs (ALAS2023-2024-721)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-721 advisory. Issue summary: Applications performing certificate name checks e.g., TLSclients checking server certificates may attempt to read an invalid memoryaddress resulting in abnormal termination of the...

[SECURITY] Fedora 39 Update: rust-tower-http-0.5.2-6.fc39

Tower middleware and utilities for HTTP clients and servers...

CVE-2024-47631

CVE-2024-47631: Stored XSS in Logo Carousel – Clients logo carousel for WP (bPlugins LLC) affecting WP plugin versions up to 1.2. Root cause is improper neutralization of input during web page generation. The issue is categorized as a stored XSS with low to moderate impact per CVSS (6.5, CVSS v3....

[SECURITY] Fedora 41 Update: znc-clientbuffer-0-0.28.20190129git9766a4a.fc41

The client buffer module maintains client specific buffers for identified clients...

Security update for openvpn

This update for openvpn fixes the following issues: CVE-2024-28882: Fix multiple exit notifications from authenticated clients will extend the validity of a closing session bsc1227546 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

RHSA-2024:4023 Red Hat Security Advisory: Release of openshift-serverless-clients kn 1.33.0 security update & enhancements

Bulletin has no description...

RHSA-2024:4867 Red Hat Security Advisory: Release of openshift-serverless-clients kn 1.33.1 security update and bug fixes

Bulletin has no description...

Security update for openvpn

This update for openvpn fixes the following issues: CVE-2024-28882: Fix multiple exit notifications from authenticated clients will extend the validity of a closing session bsc1227546 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

WordPress Logo Carousel – Clients logo carousel for WP plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Khalid Patchstack Alliance in WordPress Plugin Logo Carousel – Clients logo carousel for WP versions = 1.2...