Security update for curl

This update for curl fixes the following issues: CVE-2024-9681: Fixed HSTS subdomain overwrites parent cache entry bsc1232528 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

CVE-2024-9681

When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than otherwise intended. This affects curl using applications that enable HSTS and use URLs with the insecure "HTTP://" scheme and perform transfers with...

CVE-2024-9681: Incorrect Comparison

When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than otherwise intended. This affects curl using applications that enable HSTS and use URLs with the insecure HTTP:// scheme and perform transfers with host...

RHEL 7 : instack-undercloud (RHSA-2017:2726)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2017:2726 advisory. instack-undercloud provides a collection of scripts and elements that can be used to install an OpenStack undercloud using python-instack. The...

hornetq vulnerable to file overwrite, sensitive information disclosure

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...

GHSA-R7MV-MV7M-PJW3 hornetq vulnerable to file overwrite, sensitive information disclosure

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...

CVE-2024-51127

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...

CVE-2024-51127

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...

CVE-2024-51127

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...

CVE-2024-51127

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...

PT-2024-34531 · Hornetq · Hornetq

Name of the Vulnerable Software and Affected Versions: hornetq version 2.4.9 Description: An issue in the createTempFile method allows attackers to arbitrarily overwrite files or access sensitive information. Recommendations: For hornetq version 2.4.9, consider disabling the createTempFile method...

CVE-2024-51127: Improper Limitation of a Pathname to a Restricted Directory

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...

CVE-2024-51127

A flaw exists in the createTempFile method of hornetq , specifically within the org.hornetq/hornetq-core-client component. This vulnerability allows attackers to arbitrarily overwrite files or access sensitive information . The issue has been identified in various Red Hat JBoss Enterprise Applica...

HornetQ security vulnerabilities

HornetQ is an open source project from HornetQ Open Source for building multi-protocol, embeddable, very high performance clustered asynchronous messaging systems. A security vulnerability exists in HornetQ version v2.4.9, which stems from the createTempFile function allowing an attacker to...

CVE-2024-51127

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...

WS-2022-0436

Yapscan's report receiver server 0.18.0 up to 0.19.0 is vulnerable to path traversal and log injection. If you make use of the report receiver server experimental, a client may be able to forge requests such that arbitrary files on the host can be overwritten subject to permissions of the yapscan...

Langchain Path Traversal vulnerability

A path traversal vulnerability exists in the getFullPath method of langchain-ai/langchainjs version 0.2.5. This vulnerability allows attackers to save files anywhere in the filesystem, overwrite existing text files, read .txt files, and delete files. The vulnerability is exploited through the...

GHSA-HC5W-C9F8-9CC4 Langchain Path Traversal vulnerability

A path traversal vulnerability exists in the getFullPath method of langchain-ai/langchainjs version 0.2.5. This vulnerability allows attackers to save files anywhere in the filesystem, overwrite existing text files, read .txt files, and delete files. The vulnerability is exploited through the...

CVE-2024-5823

A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions = 20240410. This vulnerability allows an attacker to gain unauthorized access to overwrite critical configuration files within the system. Exploiting this vulnerability can lead to unauthorized changes in system behavior...

PYSEC-2024-111

A path traversal vulnerability exists in the getFullPath method of langchain-ai/langchainjs version 0.2.5. This vulnerability allows attackers to save files anywhere in the filesystem, overwrite existing text files, read .txt files, and delete files. The vulnerability is exploited through the...