UBUNTU-CVE-2024-9936

When manipulating the selection node cache, an attacker may have been able to cause unexpected behavior, potentially leading to an exploitable crash. This vulnerability affects Firefox 131.0.3...

CVE-2024-9936

When manipulating the selection node cache, an attacker may have been able to cause unexpected behavior, potentially leading to an exploitable crash. This vulnerability affects Firefox 131.0.3...

CVE-2024-9936

CVE-2024-9936 affects Mozilla Firefox prior to 131.0.3. The issue stems from manipulating the selection node cache, which can cause unexpected behavior and potentially an exploitable crash. Affected product: Firefox; vulnerable component: selection node cache handling; root cause: cache manipulat...

Mozilla Firefox Security Advisory (MFSA2024-53) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2024-53. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

librewolf -- Undefined behavior in selection node cache

[email protected] reports: When manipulating the selection node cache, an attacker may have been able to cause unexpected behavior, potentially leading to an exploitable crash. This vulnerability affects Firefox 131.0.3...

Security Vulnerability fixed in Firefox 131.0.3 — Mozilla

When manipulating the selection node cache, an attacker may have been able to cause unexpected behavior, potentially leading to an exploitable crash...

PT-2024-7152

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 131.0.3 Description The issue is related to the manipulation of the selection node cache, which may cause unexpected behavior and potentially lead to an exploitable crash. This could allow a remote attacker to cause a...

GHSA-PXHW-596R-RWQ5 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, argocd-image-updater, aws-efs-csi-driver, kubernetes, spark-operator, ip-masq-agent, kubeflow-pipelines, kubernetes-csi-driver-hostpath, nodetaint, local-static-provisioner...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, argocd-image-updater, aws-efs-csi-driver, kubernetes, spark-operator, ip-masq-agent, kubeflow-pipelines, kubernetes-csi-driver-hostpath, nodetaint, local-static-provisioner...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, crossplane-provider-aws-cloudwatchlogs, metrics-server, crossplane-provider-aws-sqs, ollama, hubble-ui, terraform-provider-sendgrid, gomplate, thanos-operator, boring-registry, capslock, zarf, kyverno-policy-reporter-kyverno-plugin,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, cloudflared, rekor, kubeflow-fips, kubeflow-katib, chartmuseum, crossplane-provider-aws-iam, terraform-provider-google, logstash-exporter-fips, crossplane-provider-aws-cloudformation, prometheus-alertmanager, terraform-docs,...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, ip-masq-agent, nodetaint, aws-efs-csi-driver, aws-efs-csi-driver-fips, prometheus-adapter, aws-ebs-csi-driver, spark-operator...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, aws-efs-csi-driver, spark-operator, ip-masq-agent, nodetaint, prometheus-adapter...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, ip-masq-agent, nodetaint, aws-efs-csi-driver, aws-efs-csi-driver-fips, prometheus-adapter, aws-ebs-csi-driver, spark-operator...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, newrelic-infrastructure-agent, terraform, gke-gcloud-auth-plugin, kubeflow-fips, kubeflow-katib, thanos-operator, buildkitd, minio, oauth2-proxy, prometheus-postgres-exporter, chartmuseum, pulumi-language-yaml,...

CVE-2023-41041 User session is still usable after logout in graylog2-server

Graylog is a free and open log management platform. In a multi-node Graylog cluster, after a user has explicitly logged out, a user session may still be used for API requests until it has reached its original expiry time. Each node maintains an in-memory cache of user sessions. Upon a cache-miss,...

GHSA-C7FC-CM7P-92R2 Openstack ironic-inspector has SQL injection vulnerability in node_cache

A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection...

CVE-2020-13949 vulnerabilities

Vulnerabilities for packages: trino, druid...

The vulnerability of the node_cache.find_node() function in the Ironic Inspector daemon, a hardware self-analysis tool for the OpenStack cloud service creation platform, allows a malicious actor to trigger a service failure.

The vulnerability of the nodecache.findnode function in the Ironic Inspector hardware self-analysis daemon of the OpenStack SDN platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability could allow a malicious actor to cause service...

openstack-ironic-inspector: SQL Injection vulnerability when receiving introspection data

A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection results by a POST to the /v1/continue endpoint. Because the API is unauthenticated, the flaw could be exploited by a...