13421 matches found
HashiCorp go-getter security vulnerability
HashiCorp go-getter is a library for Go golang from HashiCorp, USA, for downloading files or directories from various sources using URLs as the primary form of input. A security vulnerability exists in HashiCorp go-getter version 1.7.4 and earlier, which stems from the possibility of being forced...
USN-6844-1 cups vulnerability
Rory McNamara discovered that when starting the cupsd server with a Listen configuration item, the cupsd process fails to validate if bind call passed. An attacker could possibly trick cupsd to perform an arbitrary chmod of the provided argument, providing world-writable access to the target...
PT-2024-27030 · Faronics · Winselect
Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue concerns the encryption of a configuration file using a static key derived from a static five-character password. This password is hashed with the outdated MD5 algorithm, which i...
Important: unbound
Issue Overview: A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw...
SUSE CVE-2021-47604
In the Linux kernel, the following vulnerability has been resolved: vduse: check that offset is within bounds in getconfig This condition checks "len" but it does not check "offset" and that could result in an out of bounds read if "offset dev-configsize". The problem is that since both variables...
SUSE CVE-2021-47605
In the Linux kernel, the following vulnerability has been resolved: vduse: fix memory corruption in vdusedevioctl The "config.offset" comes from the user. There needs to a check to prevent it being out of bounds. The "config.offset" and "dev-configsize" variables are both type u32. So if the offs...
CVE-2024-6185
A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC 1.0. Affected by this issue is the function getipaddrdetails of the file /view/dhcp/dhcpConfig/commit.php. The manipulation of the argument ethname leads to os command injection. The attack may be launched remotely...
Fedora 39 : composer (2024-bb55f8476a)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-bb55f8476a advisory. Version 2.7.7 2024-06-10 Security: Fixed command injection via malicious git branch name GHSA-47f6-5gq3-vx9c / CVE-2024-35241 Security: Fixed multip...
DEBIAN-CVE-2021-47605
In the Linux kernel, the following vulnerability has been resolved: vduse: fix memory corruption in vdusedevioctl The "config.offset" comes from the user. There needs to a check to prevent it being out of bounds. The "config.offset" and "dev-configsize" variables are both type u32. So if the offs...
UBUNTU-CVE-2024-38550
In the Linux kernel, the following vulnerability has been resolved: ASoC: kirkwood: Fix potential NULL dereference In kirkwooddmahwparams mvmbusdraminfo returns NULL if CONFIGPLATORION macro is not defined. Fix this bug by adding NULL check. Found by Linux Verification Center linuxtesting.org wit...
CVE-2024-37621
StrongShop v1.0 was discovered to contain a Server-Side Template Injection SSTI vulnerability via the component /shippingOptionConfig/index.blade.php...
PT-2024-27678 · Unknown · Strongshop
Name of the Vulnerable Software and Affected Versions: StrongShop version 1.0 Description: A Server-Side Template Injection SSTI issue was found in the /shippingOptionConfig/index.blade.php component. Recommendations: For StrongShop version 1.0, consider restricting access to the vulnerable...
OPENSUSE-SU-2024:14051-1 keylime-config-7.11.0-1.1 on GA media
These are all security issues fixed in the keylime-config-7.11.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10769-1 freetds-config-1.2.21-1.3 on GA media
These are all security issues fixed in the freetds-config-1.2.21-1.3 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11603-1 libssh-config-0.9.6-2.1 on GA media
These are all security issues fixed in the libssh-config-0.9.6-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13096-1 keylime-config-7.4.0-1.1 on GA media
These are all security issues fixed in the keylime-config-7.4.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13287-1 keylime-config-7.6.0-1.1 on GA media
These are all security issues fixed in the keylime-config-7.6.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10146-1 perl-Config-IniFiles-2.94-1.1 on GA media
These are all security issues fixed in the perl-Config-IniFiles-2.94-1.1 package on the GA media of openSUSE Tumbleweed...