ALPINE-CVE-2024-28882

OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session...

CVE-2024-28882

OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session...

OpenVPN Security Vulnerabilities

OpenVPN is a software package for creating encrypted tunnels for Virtual Private Networks VPNs from US-based OpenVPN, which uses the OpenSSL library to encrypt data and control information, and allows created VPNs to be authenticated using a public key, an electronic certificate, or a...

CVE-2024-1182

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric MC Works64 all versions, Mitsubishi Electri...

SUSE-SU-2024:2298-1 Security update for openCryptoki

This update for openCryptoki fixes the following issues: openCryptoki was updated to version to 3.17.0 bsc1220266, bsc1219217 + openCryptoki 3.17 - tools: added function to list keys to p11sak - common: added support for OpenSSL 3.0 - common: added support for event notifications - ICA: added SW...

Affirm says Evolve Bank data breach also compromised some of its customers

Buy now, pay later payment specialist Affirm has warned that holders of its payment cards had their personal information exposed after a ransomware attack and data breach at Evolve Bank & Trust. In a form 8-K, submitted to the Securities and Exchange Commission SEC, Affirm states: “Because the...

CVE-2024-36989 Low-privileged user could create notifications in Splunk Web Bulletin Messages

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, a low-privileged user that does not hold the admin or power Splunk roles could create notifications in Splunk Web Bulletin Messages that all users on the instance receive...

CVE-2024-36989

CVE-2024-36989 affects Splunk Enterprise (<9.2.2, <9.1.5, <9.0.10) and Splunk Cloud Platform (

CVE-2024-36989 Low-privileged user could create notifications in Splunk Web Bulletin Messages

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, a low-privileged user that does not hold the admin or power Splunk roles could create notifications in Splunk Web Bulletin Messages that all users on the instance receive...

com.mabl.integration.jenkins:mabl-integration (>=0.0.5, <=0.0.19), org.jenkins-ci.plugins:hockeyapp (>=1.3.0, <=1.3.3) +2 more potentially affected by CVE-2024-39458 via org.jenkins-ci.plugins:structs (1.13)

org.jenkins-ci.plugins:structs MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:structs and may be impacted: - com.mabl.integration.jenkins:mabl-integration =0.0.5, =1.3.0, =1.2.1, =2.0.0, =2.1.0 Source cves:...

org.jenkins-ci.plugins:skip-notifications-trait (>=1.0.0, <=1.0.2) potentially affected by CVE-2024-39460 via org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.2.0)

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source and may be impacted: - org.jenkins-ci.plugins:skip-notifications-trait...

Emby Media Server Cross-Site Scripting Vulnerability

Emby Media Server is a personal media server software for organizing, managing and sharing multimedia content such as music, movies, TV shows and more. Emby Media Server suffers from a cross-site scripting vulnerability that can be exploited to elevate privileges via the notifications.html...

MAL-2024-7037 Malicious code in telegram-notifications (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in telegram-notifications (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in datadog_notifications (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Be.Vlаanderen.Basisregisters.GrAr.Notificatiоns (NuGet)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-30931

Stored Cross Site Scripting vulnerability in Emby Media Server Emby Media Server 4.8.3.0 allows a remote attacker to escalate privileges via the notifications.html component...

PT-2024-5800 · Openvpn +6 · Openvpn +6

Name of the Vulnerable Software and Affected Versions: OpenVPN versions 2.6.0 through 2.6.10 Description: The issue is related to OpenVPN's handling of exit notifications from authenticated clients in a server role. When multiple exit notifications are accepted, it can extend the validity of a...

PT-2024-23681 · Emby · Emby Media Server

Name of the Vulnerable Software and Affected Versions: Emby Media Server version 4.8.3.0 Description: A Stored Cross Site Scripting issue allows a remote attacker to escalate privileges via the notifications.html component. Recommendations: For Emby Media Server version 4.8.3.0, consider disablin...

Emby security vulnerabilities

Emby Media Server is a personal media server software for organizing, managing and sharing multimedia content such as music, movies, TV shows and more. Emby Media Server suffers from a cross-site scripting vulnerability that can be exploited to elevate privileges via the notifications.html...