CentOS 9 : rsyslog-8.2102.0-111.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the rsyslog-8.2102.0-111.el9 build changelog. - Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted...

CVE-2021-47025

In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: Always enable the clk on resume In mtkiommuruntimeresume always enable the clk, even if m4udom is null. Otherwise the 'suspend' cb might disable the clk which is already disabled causing the warning: 1.586104...

CVE-2021-46976

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix crash in autoretire The retire logic uses the 2 lower bits of the pointer to the retire function to store flags. However, the autoretire function is not guaranteed to be aligned to a multiple of 4, which causes...

CVE-2021-47025 iommu/mediatek: Always enable the clk on resume

In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: Always enable the clk on resume In mtkiommuruntimeresume always enable the clk, even if m4udom is null. Otherwise the 'suspend' cb might disable the clk which is already disabled causing the warning: 1.586104...

CVE-2021-46976 drm/i915: Fix crash in auto_retire

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix crash in autoretire The retire logic uses the 2 lower bits of the pointer to the retire function to store flags. However, the autoretire function is not guaranteed to be aligned to a multiple of 4, which causes...

PT-2024-11943

Name of the Vulnerable Software and Affected Versions Honeywell MPA2 Access Panel versions prior to R1.00.08.05 Description The issue is related to improper neutralization of input during web page generation, which allows cross-site scripting XSS using invalid characters. This can be exploited...

CVE-2024-27516: Improper Neutralization of Special Elements used in an OS Command

Server-Side Template Injection SSTI vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhcweb/modules/lhfaq/faqweight.php...

com.nannoq:auth (>=1.0.0, <=1.0.4), org.rapidpm.microservice:rapidpm-microservice-modules-hazelcast (>=0.7.0, <=1.1.0) +1 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast-all (3.8)

com.hazelcast:hazelcast-all MAVEN version 3.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast-all and may be impacted: - com.nannoq:auth =1.0.0, =0.7.0, =0.7.0, =1.1.0 Source cves: CVE-2023-45859 Source advisory:...

com.jwebmp.jre10:guiced-hazelcast (>=0.58.0.20-rctest, <=0.59.0.14), com.jwebmp:guiced-hazelcast (>=0.58.0.20-rctest, <=0.59.0.14) +2 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast-all (3.10.4)

com.hazelcast:hazelcast-all MAVEN version 3.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast-all and may be impacted: - com.jwebmp.jre10:guiced-hazelcast =0.58.0.20-rctest, =0.58.0.20-rctest, =0.59.0.14 -...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUGKMAPLOCAL is enabled The debugging code for kmaplocal doubles the number of per-CPU fixmap slots allocated for kmaplocal, in order to use half of them as guard regions. This...

CVE-2023-7033

Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L series CPU module, MELSEC iQ-R Ethernet Interface Module, MELSEC iQ-R CC-Link IE TSN Master/Local Module, CC-Link IE TSN Remote I/O Module, CC-Link IE TSN...

Denial of service

Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote attacker to cause a temporary Denial of Service condition for a certain period of time in Ethernet communication of the products by performing TCP SYN...

CVE-2023-7033

Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L series CPU module, MELSEC iQ-R Ethernet Interface Module, MELSEC iQ-R CC-Link IE TSN Master/Local Module, CC-Link IE TSN Remote I/O Module, CC-Link IE TSN...

CVE-2023-7033

Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L series CPU module, MELSEC iQ-R Ethernet Interface Module, MELSEC iQ-R CC-Link IE TSN Master/Local Module, CC-Link IE TSN Remote I/O Module, CC-Link IE TSN...

CVE-2023-7033

CVE-2023-7033 describes an Insufficient Resource Pool vulnerability in the Ethernet function affecting Mitsubishi Electric MELSEC product families (including MELSEC iQ-F/FX5, iQ-R, iQ-L series CPUs and related Ethernet/communication modules, motion modules, inverters, and related CC‑Link IE TSN a...

org.springframework:spring-portlet (2.0.3), org.springframework:spring-remoting (2.0.3) +4 more potentially affected by CVE-2024-22243 via org.springframework:spring-web (2.0.3)

org.springframework:spring-web MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-portlet 2.0.3 - org.springframework:spring-remoting 2.0.3 -...

Kaspersky Endpoint Security Privilege Bypass

The vulnerability of Kaspersky Endpoint Security’s antivirus protection for Windows relates to the insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to temporarily disable the protection modules during product installation or reinstallation scenarios...

PT-2024-1793 · Kaspersky · Kaspersky Endpoint Security For Windows

Name of the Vulnerable Software and Affected Versions: Kaspersky Endpoint Security for Windows affected versions not specified Description: The issue is related to insecure privilege management in Kaspersky Endpoint Security for Windows. It may allow a remote attacker to suspend the operation of...

CVE-2023-52435 net: prevent mss overflow in skb_segment()

In the Linux kernel, the following vulnerability has been resolved: net: prevent mss overflow in skbsegment Once again syzbot is able to crash the kernel in skbsegment 1 GSOBYFRAGS is a forbidden value, but unfortunately the following computation in skbsegment can reach it quite easily : mss = ms...

golang: cmd/go: Protocol Fallback when fetching modules

A flaw was found in the Golang package cmd/go. This issue permits the fallback to insecure "git://" if trying to fetch a .git module that has no "https://" or "git+ssh://" available...