Security Updates for Microsoft Excel Products (November 2024)

The Microsoft Excel Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2024-49026, CVE-2024-49027,...

KB5046618: Windows Server version 23H2 Security Update (November 2024)

The remote Windows host is missing security update 5046618. It is, therefore, affected by multiple vulnerabilities - Windows Kerberos Remote Code Execution Vulnerability CVE-2024-43639 - Windows NT OS Kernel Elevation of Privilege Vulnerability CVE-2024-43623 - Windows Telephony Service Elevation...

Mars: unauthorized access and add user and change personal information all users

The report describes a vulnerability in the ██████████ website, where unauthorized access to an API endpoint allowed attackers to add new users and modify personal information of existing users. The vulnerability was classified as Improper Access Control. The issue stemmed from the absence of...

Photon OS 5.0: Linux PHSA-2024-5.0-0391

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0391. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2024-7682 · Glpi +1 · Glpi +1

Name of the Vulnerable Software and Affected Versions: GLPI versions 9.5.0 through 10.0.16 Description: The issue is related to incorrect session management in the GLPI system, which can allow a remote attacker to gain full access to the application by intercepting a session. An unauthenticated...

SUSE SLES15 / openSUSE 15 Security Update : govulncheck-vulndb (SUSE-SU-2024:3911-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3911-1 advisory. Update to version 0.0.20241030T212825 2024-10-30T21:28:25Z jscPED-11136 - Go CVE Numbering Authority IDs added or updated with...

Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20241030T212825 2024-10-30T21:28:25Z jscPED-11136 Go CVE Numbering Authority IDs added or updated with aliases: GO-2024-3230 CVE-2024-48921 GHSA-qjvc-p88j-j9rm GO-2024-3232 CVE-2024-10241 GHSA-6mvp-gh77-7vwh Go C...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which originates in the nfsd module, where a race condition exists, leading to possible dangling pointer usage when releasi...

RHEL 8 : kernel-rt (RHSA-2024:8870)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8870 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

[SECURITY] [DLA 3944-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3944-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort November 03, 2024 https://wiki.debian.org/LTS -...

PT-2024-71: Predictable format of user identifiers in Password Pusher

The vulnerability was identified in Password Pusher versions prior to 1.48.0. Web application uses an unreliable algorithm for generating user account IDs. As a result, an intruder can predict existing identifiers within the application to carry out attacks targeting the authentication mechanism...

SUSE SLES15 Security Update : kernel (Live Patch 44 for SLE 15 SP3) (SUSE-SU-2024:3854-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3854-1 advisory. This update for the Linux Kernel 5.3.18-15030059161 fixes several issues. The following security issues were fixed: - CVE-2021-47598: schcake: ...

USN-7021-5: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - BTRFS file system; - F2FS file system; - GFS2 file system; - BPF subsystem; - Netfilter; - RxRPC...

corepack22-22.10.0-1.1 on GA media (moderate)

corepack22-22.10.0-1.1 on GA media Announcement ID: openSUSE-SU-2024:14435-1 Rating: moderate Cross-References: CVE-2024-22018 CVE-2024-22020 CVE-2024-36137 CVE-2024-36138 CVE-2024-37372 CVSS scores: CVE-2024-22018 SUSE : 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N CVE-2024-22020 SUSE : 6.5...

PT-2024-41012 · Unknown · Govulncheck-Vulndb

Name of the Vulnerable Software and Affected Versions: govulncheck-vulndb versions prior to 0.0.20241028T152002 Description: The issue concerns updates to the govulncheck-vulndb, which includes various Go CVE Numbering Authority IDs that have been added or updated. No specific details about the...

[SECURITY] [DLA 3939-1] python-git security update

Debian LTS Advisory DLA-3939-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert October 29, 2024 https://wiki.debian.org/LTS Package : python-git Version : 3.1.14-1+deb11u1 CVE ID : CVE-2022-24439 CVE-2023-40267 CVE-2023-41040 Debian Bug : 1027163 1043503 GitPython...

Debian dla-3938 : exim4 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3938 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3938-1 [email protected]...

openSUSE 15 Security Update : chromium (openSUSE-SU-2024:0341-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0341-1 advisory. Chromium 130.0.6723.69 boo1232060 CVE-2024-10229: Inappropriate implementation in Extensions CVE-2024-10230: Type Confusion in V8 CVE-2024-10231:...

Withdrawn Advisory: go-mysql affected by go.uuid's Predictable UUID Identifiers

Withdrawn Advisory This advisory has been withdrawn because the vulnerability does not affect a released version of the github.com/go-mysql-org/go-mysql package. For more information, see https://github.com/github/advisory-database/pull/4990. Original Advisory Affected by CVE-2021-3538...

CVE-2022-30361

OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserType. No authentication is required. The information disclosed is associated with the registered user ID, status, email address, roles, user type, license type, and personal detai...