PT-2024-9866

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks PAN-OS versions 10.X and 11.X, including Prisma Access. Description: A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious...

Palo Alto Networks PAN-OS 安全漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS, which arises from a denial of service vulnerability in the DNS Security feature that allows an unauthenticated attacker...

CVE-2024-9503 Maintenance & Coming Soon Redirect Animation <= 2.1.3 - Missing Authorization to Settings Update

The Maintenance & Coming Soon Redirect Animation plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wplotiaddwhitelistedrolesoption', 'wplotiremovewhitelistedrolesoption', 'wplotiaddwhitelistedusersoption',...

Fedora 40 : python3.13 (2024-be6ea1ce44)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-be6ea1ce44 advisory. This is the first maintenance release of Python 3.13 ==================================================== Python 3.13 is the newest major release of...

CVE-2024-54425

Cross-Site Request Forgery CSRF vulnerability in LionScripts.com LionScripts: Site Maintenance & Noindex Nofollow Plugin maintenance-and-noindex-nofollow allows Stored XSS.This issue affects LionScripts: Site Maintenance & Noindex Nofollow Plugin: from n/a through = 2.1...

CVE-2024-54425 WordPress LionScripts: Site Maintenance plugin <= 2.1 - CSRF to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery CSRF vulnerability in LionScripts.com LionScripts: Site Maintenance & Noindex Nofollow Plugin maintenance-and-noindex-nofollow allows Stored XSS.This issue affects LionScripts: Site Maintenance & Noindex Nofollow Plugin: from n/a through = 2.1...

CVE-2024-54425

CVE-2024-54425: LionScripts: Site Maintenance & Noindex Nofollow Plugin is affected by a Cross-Site Request Forgery that enables Stored XSS. Affected versions: up to 2.1. Exploitation details and patch status vary across sources; Patch status for LionScripts CVE-2024-54425 is not provided in the ...

CVE-2024-8650

An issue was discovered in GitLab CE/EE affecting all versions from 15.0 prior to 17.4.6, 17.5 prior to 17.5.4, and 17.6 prior to 17.6.2 that allowed non-member users to view unresolved threads marked as internal notes in public projects merge requests...

WordPress LionScripts: Site Maintenance plugin <= 2.1 - CSRF to Stored Cross-Site Scripting vulnerability

CSRF to Stored Cross-Site Scripting vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin LionScripts: Site Maintenance & Noindex Nofollow Plugin versions = 2.1...

CVE-2024-10043

An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 17.4.6, all versions starting from 17.5 before 17.5.4 all versions starting from 17.6 before 17.6.2, that allows group users to view confidential incident title through the Wiki History Diff feature,...

CVE-2024-8233

An issue has been discovered in GitLab CE/EE affecting all versions from 9.4 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. An attacker could cause a denial of service with requests for diff files on a commit or merge request...

CVE-2024-12292

An issue was discovered in GitLab CE/EE affecting all versions starting from 11.0 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6 prior to 17.6.2, where sensitive information passed in GraphQL mutations may have been retained in GraphQL logs...

The vulnerability of the microprogramming software for Schneider Electric’s programmable logic controllers (PLC) models M241, M251, M258, and LMC058 is related to errors in processing input data. This vulnerability allows attackers to trigger maintenance failures and compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the microprogrammed software of Schneider Electric’s programmable logic controllers PLC models M241, M251, M258, and LMC058 is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to trigger maintenance failures and compromise the...

Microsoft and Adobe Patch Tuesday, December 2024 Security Update Review

Closing out 2024, Microsoft’s December Patch Tuesday highlights the importance of year-end maintenance with updates tackling critical vulnerabilities. As cyber threats remain persistent, these patches serve as a vital reminder of the ongoing need for robust system security. Microsoft Patch Tuesda...

RUSTSEC-2024-0422 gtk-layer-shell GTK3 bindings - no longer maintained

The gtk-layer-shell GTK3 bindings are no longer maintained. The maintainers have archived the repository, and added a note to the crate description and its README.md that the crates are no longer maintained. Please take a look at gtk4-layer-shell instead...

PT-2024-40966 · Unknown · Gtk-Layer-Shell-Sys

Name of the Vulnerable Software and Affected Versions: gtk-layer-shell-sys affected versions not specified Description: The gtk-layer-shell-sys GTK3 bindings are no longer maintained. The maintainers have archived the repository and added a note to the crate description and its README.md that the...

CVE-2024-9705

The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ucsmupdatetemplatenamelite' function in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with...

CVE-2024-9706

The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ucsmactivatelitetemplatelite function in all versions up to, and including, 1.0.9. This makes it possible for unauthenticated attackers to change...

DEBIAN-CVE-2024-53137

In the Linux kernel, the following vulnerability has been resolved: ARM: fix cacheflush with PAN It seems that the cacheflush syscall got broken when PAN for LPAE was implemented. User access was not enabled around the cache maintenance instructions, causing them to fault...

UBUNTU-CVE-2024-53137

In the Linux kernel, the following vulnerability has been resolved: ARM: fix cacheflush with PAN It seems that the cacheflush syscall got broken when PAN for LPAE was implemented. User access was not enabled around the cache maintenance instructions, causing them to fault...