CLSA-2024-1720776957 vim: Fix of 10 CVEs

CVE-2023-0054: check the return value of vimregsub - CVE-2023-0049: avoid going over the NUL at the end - CVE-2023-0288: prevent the cursor from moving to line zero - CVE-2023-0433: check for not going over the end of the line - CVE-2023-2610: limit the text length to MAXCOL - CVE-2023-4750:...

Cross-site Scripting

Overview org.fujion.webjars:bootstrap is a popular front-end framework for faster and easier web development. Affected versions of this package are vulnerable to Cross-site Scripting through the data-loading-text attribute in the button component. An attacker can execute arbitrary JavaScript code...

Number withdrawn

Bootstrap is an open source web front-end framework developed using HTML, CSS, and JavaScript by Bootstrap, Inc. This CVE number has been withdrawn...

KB5040426: Cumulative security update for Internet Explorer: July 9, 2024

KB5040426: Cumulative security update for Internet Explorer: July 9, 2024 Important Certain versions of Microsoft Internet Explorer have reached the end of support. Note that some versions of Internet Explorer may be supported past the latest OS end date when Extended Security Updates ESUs are...

vaeThink Security Vulnerabilities

vaeThink is a software application. Based on ThinkPHP5 and Layui, while keeping the core concept of rapid development and simplicity, vaeThink provides basic development and encapsulation of functions necessary for general projects, helping users to quickly complete the basic functions when...

KB5040562: Servicing stack update for Windows 10, version 1607 and Server 2016: July 9, 2024

None None...

CVE-2024-38095

.NET and Visual Studio Denial of Service Vulnerability...

CVE-2024-30105

.NET and Visual Studio Denial of Service Vulnerability...

CVE-2024-38081

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability...

KB5040570: Servicing stack update for Windows Server 2012: July 9, 2024

KB5040570: Servicing stack update for Windows Server 2012: July 9, 2024 End of support information Windows Server 2012 reached end of support EOS on October 10, 2023. Extended Security Updates ESUs are available for purchase and will continue for three years, renewable on an annual basis, until t...

KB5040569: Servicing stack update for Windows Server 2012 R2: July 9, 2024

KB5040569: Servicing stack update for Windows Server 2012 R2: July 9, 2024 End of support information REMINDER Windows 8.1 reached end of support EOS on January 10, 2023, at which point technical assistance and software updates are no longer provided. If you have devices running Windows 8.1, we...

Checkmk Cross-Site Scripting Vulnerability

Checkmk is an IT monitoring platform from Checkmk, Inc. Checkmk suffers from a cross-site scripting vulnerability that stems from a stored cross-site scripting XSS vulnerability, which allows an attacker to execute arbitrary scripts by injecting HTML elements. The affected versions are as follows...

Fedoraproject Fedora SEoL (34.x)

According to its version, Fedoraproject Fedora is 34.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 ...

Canonical Ubuntu Linux SEoL (21.04.x)

According to its version, Canonical Ubuntu Linux is 21.04.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL...

Debian Linux SEoL (2.1.x)

According to its version, Debian Linux is 2.1.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...

Fedoraproject Fedora SEoL (20.x)

According to its version, Fedoraproject Fedora is 20.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 ...

SUSE Enterprise Linux SEoL (15.3.x)

According to its version, SUSE Enterprise Linux is 15.3.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 809...

Apple Mac OS X SEoL (11.x)

According to its version, Apple Mac OS X is 11.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...

Red Hat Enterprise Linux SEoL (9.10.x)

According to its version, Red Hat Enterprise Linux is 9.10.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL...

Canonical Ubuntu Linux SEoL (14.10.x)

According to its version, Canonical Ubuntu Linux is 14.10.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL...