zhmc-ansible-modules (0.2.0), zhmc-prometheus-exporter (0.6.1) +1 more potentially affected by CVE-2024-53865 via zhmcclient (>=0.30.2, <=1.7.2)

zhmcclient PYPI version =0.30.2, =1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on zhmcclient and may be impacted: - zhmc-ansible-modules 0.2.0 - zhmc-prometheus-exporter 0.6.1 - zhmccli 0.21.2 Source cves: CVE-2024-53865 Source advisory:...

[SECURITY] Fedora 41 Update: pam-1.6.1-7.fc41

PAM Pluggable Authentication Modules is a system security tool that allows system administrators to set authentication policy without having to recompile programs that handle authentication...

PT-2024-27115 · Nodemcu · Nodemcu

Name of the Vulnerable Software and Affected Versions: nodemcu versions prior to 3.0.0-release 20240225 Description: The issue is related to an integer overflow in the getnum function located at /modules/struct.c. This overflow can be exploited, potentially leading to unintended behavior. No...

CVE-2024-36671

nodemcu before v3.0.0-release20240225 was discovered to contain an integer overflow via the getnum function at /modules/struct.c...

CVE-2024-36671

NodeMCU firmware versions prior to v3.0.0-release_20240225 are vulnerable to an integer overflow within the getnum function located at /modules/struct.c. This flaw can lead to unintended behavior when processed. To remediate this issue, users should update to version 3.0.0-release_20240225 or lat...

NodeMCU security vulnerabilities

NodeMCU is a Lua-based open source firmware from NodeMCU Open Source. A security vulnerability exists in NodeMCU version v3.0.0-release20240225, which stems from the getnum function in /modules/struct.c containing an integer overflow...

zhmc-ansible-modules security vulnerability

zhmc-ansible-modules is an Ansible collection for IBM Z HMC open sourced by zhmcclient. A security vulnerability exists in zhmc-ansible-modules, which stems from the fact that under certain circumstances, ibm.ibmzhmc writes password-like attributes in plaintext to its log files and to the output...

[SECURITY] Fedora 41 Update: perl-Module-ScanDeps-1.37-1.fc41

This module scans potential modules used by perl programs and returns a hash reference. Its keys are the module names as they appear in %INC e.g. Test/More.pm. The values are hash references...

Malware in seller-webchat-modules

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2024-53100

CVE-2024-53100 : In the Linux kernel, the nvme: tcp driver had a race between queue_lock and mutex_destroy during error recovery. A mutex_lock added in nvme_tcp_get_address() could race with nvme_tcp_free_queue() and trigger a WARN. The issue has been resolved via a patch that adjusts locking in ...

io.github.johnjcool:keycloak-cas-services (>=4.2.0.final, <=4.2.1.final), org.keycloak:keycloak-adapter-core (4.2.0.final) +64 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (4.2.0.final)

org.keycloak:keycloak-core MAVEN version 4.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.2.0.final, =4.2.1.final -...

org.jboss.aerogear.unifiedpush:unifiedpush-service (1.2.3.final), org.keycloak:keycloak-adapter-core (3.4.2.final) +57 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (3.4.2.final)

org.keycloak:keycloak-core MAVEN version 3.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-service 1.2.3.final - org.keycloak:keycloak-adapter-core...

org.fintrace:microservice-keycloak-support (>=0.0.4, <=0.0.9), org.keycloak:keycloak-adapter-core (4.0.0.beta3) +64 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (4.0.0.beta3)

org.keycloak:keycloak-core MAVEN version 4.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.fintrace:microservice-keycloak-support =0.0.4, =0.0.9 - org.keycloak:keycloak-adapter-core...

org.jenkins-ci.plugins:keycloak (2.3.0), org.keycloak:keycloak-adapter-core (4.8.0.final) +64 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (4.8.0.final)

org.keycloak:keycloak-core MAVEN version 4.8.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jenkins-ci.plugins:keycloak 2.3.0 - org.keycloak:keycloak-adapter-core 4.8.0.final -...

it.vige:school-jsf (>=1.2.0, <=1.2.1), org.keycloak:keycloak-adapter-core (4.8.1.final) +64 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (4.8.1.final)

org.keycloak:keycloak-core MAVEN version 4.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - it.vige:school-jsf =1.2.0, =1.2.1 - org.keycloak:keycloak-adapter-core 4.8.1.final -...

io.quarkus:quarkus-keycloak (>=0.14.0, <=0.15.0), io.quarkus:quarkus-keycloak-deployment (>=0.14.0, <=0.15.0) +67 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (6.0.0)

org.keycloak:keycloak-core MAVEN version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.quarkus:quarkus-keycloak =0.14.0, =0.14.0, =1.9.0, =1.9.0, =1.9.4 - org.keycloak:keycloak-adapter-core...

org.keycloak:keycloak-adapter-core (8.0.0), org.keycloak:keycloak-admin-client (8.0.0) +57 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (8.0.0)

org.keycloak:keycloak-core MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 8.0.0 - org.keycloak:keycloak-admin-client 8.0.0 -...

io.github.project-openubl:xbuilder-server-war (>=1.2.1.final, <=1.2.2.final), io.github.project-openubl:xbuilder-server-x (>=1.2.1.final, <=1.2.2.final) +61 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (11.0.1)

org.keycloak:keycloak-core MAVEN version 11.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.github.project-openubl:xbuilder-server-war =1.2.1.final, =1.2.1.final, =1.8.0.cr1, =1.8.0.cr1,...

Important: Red Hat Security Advisory: pam:1.5.1 security update

An update for the pam:1.5.1 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: pam security update

An update for pam is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...