[SECURITY] [DSA 5765-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5765-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 04, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3860-1] dovecot security update

Debian LTS Advisory DLA-3860-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin September 02, 2024 https://wiki.debian.org/LTS Package : dovecot Version : 1:2.3.13+dfsg1-2+deb11u2 CVE ID : CVE-2024-23184 CVE-2024-23185 Debian Bug : 1078876 1078877 Vulnerabilities we...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2024:0267-1 Rating: important References: 1229897 Cross-References: CVE-2024-7969 CVE-2024-8193 CVE-2024-8194 CVE-2024-8198 CVSS scores: CVE-2024-7969 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affecte...

[SECURITY] [DSA 5760-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5760-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 29, 2024 https://www.debian.org/security/faq -...

Exploit for CVE-2024-46310

CVE-2024-46310 POC for CVE-2024-46310 For FXServer version's v...

CVE-2024-36516

creationtimestamp| type| source ---|---|--- 2024-08-23 17:07:56+00:00| seen| https://t.me/cvedetector/3989 2024-08-23 17:07:57+00:00| seen| https://t.me/cvedetector/3990...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2024:0258-2 Rating: important References: 1229426 1229591 Cross-References: CVE-2024-7964 CVE-2024-7965 CVE-2024-7966 CVE-2024-7967 CVE-2024-7968 CVE-2024-7969 CVE-2024-7971 CVE-2024-7972 CVE-2024-7973 CVE-2024-79...

CVE-2024-42490

authentik (open-source Identity Provider) exposes certain API endpoints without proper authentication/authorization. Affected endpoints include /api/v3/crypto/certificatekeypairs//view_certificate/, /api/v3/crypto/certificatekeypairs//view_private_key/, and /api/v3/.../used_by/, where access depe...

GO-2022-0912 Predictable SIF UUID Identifiers in github.com/sylabs/sif

Predictable SIF UUID Identifiers in github.com/sylabs/sif...

CVE-2024-4548

creationtimestamp| type| source ---|---|--- 2024-08-21 14:03:13+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/diaenergiesqli.rb 2025-02-06 03:13:46+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:11:04+00:00| seen|...

AZL-47825 CVE-2024-42285 affecting package kernel for versions less than 6.6.47.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs iwconnreqhandler associates a new struct rdmaidprivate connid with an existing struct iwcmid cmid as follows: connid-cmid.iw = cmid; cmid-context = connid; cmid-cmhandl...

CVE-2024-6459

creationtimestamp| type| source ---|---|--- 2024-08-17 08:56:59+00:00| seen| https://t.me/cvedetector/3378 2024-08-17 13:59:48+00:00| seen| https://t.me/CveExploits/8...

AMD Graphics Driver Vulnerabilities - Lenovo Support US

No description provided...

Multi-vendor BIOS Security Vulnerabilities (August, 2024) - Lenovo Support US

No description provided...

CVE-2024-7658

A vulnerability, which was classified as problematic, has been found in projectsend up to r1605. This issue affects the function getpreview of the file process.php. The manipulation leads to improper control of resource identifiers. The attack may be initiated remotely. Upgrading to version r1720...

PT-2024-38466 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue involves an unusable ConsultID alert due to an invalid candidate number, which is not valid and should not be used. There are no associated ConsultIDs for this candidate numbe...

MuPDF: Multiple Vulnerabilities

Background A lightweight PDF, XPS, and E-book viewer. Description Multiple vulnerabilities have been discovered in MuPDF. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround at thi...

CVE-2024-7658 projectsend process.php get_preview resource injection

A vulnerability, which was classified as problematic, has been found in projectsend up to r1605. This issue affects the function getpreview of the file process.php. The manipulation leads to improper control of resource identifiers. The attack may be initiated remotely. Upgrading to version r1720...

matio: Multiple Vulnerabilities

Background matio is a library for reading and writing matlab files. Description Multiple vulnerabilities have been discovered in matio. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known...

libde265: Multiple Vulnerabilities

Background Open h.265 video codec implementation. Description Multiple vulnerabilities have been discovered in libde265. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround at this...