Foxit PhantomPDF Multiple Vulnerabilities (Dec 2024) - Windows

Foxit PhantomPDF is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foxitsoftware:phantompdf";...

RHEL 8 : thunderbird (RHSA-2024:10733)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:10733 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: Potential disclosure of plaintext in OpenPGP...

CVE-2024-53710

creationtimestamp| type| source ---|---|--- 2024-12-02 17:21:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113584379539459137...

Apple TV < 18.1 Multiple Vulnerabilities (121569)

According to its banner, the version of Apple TV on the remote device is prior to 18.1. It is therefore affected by multiple vulnerabilities as described in the 121569 security advisory. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid211992; scriptversion"1.3";...

PT-2024-35766 · Siyuan · Siyuan

Name of the Vulnerable Software and Affected Versions: Siyuan version 3.1.11 Description: A SQL injection issue has been identified in Siyuan via the ids array parameter in the "/batchGetBlockAttrs" API endpoint. This allows for potential exploitation. Recommendations: For Siyuan version 3.1.11, ...

[SECURITY] [DLA 3969-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3969-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort November 28, 2024 https://wiki.debian.org/LTS -...

Mozilla Firefox ESR Security Update (MFSA2024-64) - Mac OS X

Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox Security Update (MFSA2024-63) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

ALSA-2024:10384 Important: tuned security update

The tuned packages provide a service that tunes system settings according to a selected profile. Security Fixes: tuned: scriptpre and scriptpost options allow to pass arbitrary scripts executed by root CVE-2024-52336 tuned: improper sanitization of instancename parameter of the instancecreate...

Linux iommufd Heap Buffer Overflow

The vulnerability of the ioptareasplit function in the iommufd component of Linux operating systems is related to the use of memory after its release, due to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility...

govulncheck-vulndb-0.0.20241121T195252-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20241121T195252-1.1 on GA media Announcement ID: openSUSE-SU-2024:14519-1 Rating: moderate Cross-References: CVE-2024-52280 CVE-2024-52282 CVE-2024-52309 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These...

[SECURITY] [DSA 5818-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5818-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 24, 2024 https://www.debian.org/security/faq -...

Debian dsa-5818 : affs-modules-6.1.0-21-4kc-malta-di - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5818 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5818-1 [email protected] https://www.debian.org/securit...

Debian dsa-5817 : chromium - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5817 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5817-1 [email protected] https://www.debian.org/securit...

PostgreSQL row security below e.g. subqueries disregards user ID changes

...

Astra Linux – Vulnerability in LibreOffice

LibreOffice Calc can import tracked changes from a spreadsheet document. There was a heap buffer overflow issue when a document reused the same change identifier for two different types of changes. The importer treated one change object as a different, larger type and exceeded the allocated memor...

Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20241112T145010 2024-11-12T14:50:10Z. Refs jscPED-11136 Go CVE Numbering Authority IDs added or updated with aliases: GO-2024-3250 CVE-2024-51744 GHSA-29wx-vh33-7x7r Update to version 0.0.20241108T172500...

Slackware Linux 15.0 / current php81 Multiple Vulnerabilities (SSA:2024-327-01)

The version of php81 installed on the remote host is prior to 8.1.31 / 8.3.14. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-327-01 advisory. New php packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

Sentry security vulnerabilities

Sentry is an open source bug tracking and performance monitoring platform for developers from Sentry. A security vulnerability exists in Sentry version 24.11.0. An attacker can exploit the vulnerability to obtain IDs and keys...

AZL-53756 CVE-2024-52616 affecting package avahi for versions less than 0.8-4

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...