CVE-2024-33605

Improper processing of some parameters of installedemanuallist.html leads to a path traversal vulnerability. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under References...

CVE-2024-45659

creationtimestamp| type| source ---|---|--- 2025-02-04 17:39:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113946836737794912 2025-02-04 18:15:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhenzvik3p2j 2025-02-04 20:35:02+00:00| seen|...

Moderate: keepalived security update

The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server IPVS kernel module providing layer-4 transport layer load balancing. Keepalived implements a set of checke...

Moderate: galera and mariadb security update

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs a...

dovecot24-2.4.0-1.1 on GA media (moderate)

dovecot24-2.4.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14715-1 Rating: moderate Cross-References: CVE-2017-14461 CVE-2017-15130 CVE-2017-15132 CVE-2019-10691 CVE-2019-11494 CVE-2019-11499 CVE-2019-11500 CVE-2019-19722 CVE-2019-3814 CVE-2019-7524 CVE-2020-10957 CVE-2020-10958...

Argo CD GitOps Engine does not scrub secret values from patch errors

Impact A vulnerability was discovered in Argo CD that exposed secret values in error messages and the diff view when an invalid Kubernetes Secret resource was synced from a repository. The vulnerability assumes the user has write access to the repository and can exploit it, either intentionally o...

CVE-2024-13694

The WooCommerce Wishlist High customization, fast setup,Free Elementor Wishlist, most features plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.7 via the downloadpdffile function due to missing validation on a user controlled key. Th...

WordPress plugin Event Tickets and Registration 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

ALSA-2025:0837 Important: unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation CVE-2024-1488 unbound: Unbounded name compression could lead to Denial of Service...

CVE-2024-40891

creationtimestamp| type| source ---|---|--- 2025-01-28 21:13:33+00:00| seen| https://bsky.app/profile/greynoise.bsky.social/post/3lgtep3hmh22o 2025-01-28 21:19:14+00:00| seen| https://infosec.exchange/users/iagox86/statuses/113908066147897929 2025-01-28 21:28:59+00:00| seen|...

Important: Red Hat Security Advisory: rsync security update

An update for rsync is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2024-7881

creationtimestamp| type| source ---|---|--- 2025-01-28 15:08:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113906608799064383 2025-01-28 15:16:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgsqqgb2zd2n 2025-01-28 17:06:57+00:00| seen|...

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.14 packages and security update

Red Hat OpenShift Container Platform release 4.17.14 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

Important: gimp:2.8 security update

The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: PSD buffe...

SUSE SLES15 Security Update : kernel (Live Patch 24 for SLE 15 SP4) (SUSE-SU-2025:0251-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0251-1 advisory. This update for the Linux Kernel 5.14.21-15040024111 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed...

Moderate: mariadb:10.5 security update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Security Fixes: mysql: InnoDB unspecified vulnerability CPU Oct 2023 CVE-2023-22084 mysql: Client: mysqldump unspecified vulnerability CPU Apr 2024 CVE-2024-21096 For more details about the security...

SUSE-SU-2025:0264-1 Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024119 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed dstnegativeadvice race bsc1226324. - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. - CVE-2022-4895...

Moderate: Red Hat Security Advisory: Release of OpenShift Serverless Logic 1.35.0 security update & enhancements

Release of OpenShift Serverless Logic 1.35.0 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

CVE-2024-52972

creationtimestamp| type| source ---|---|--- 2025-01-23 07:03:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2713 2025-01-23 07:15:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgfdjuiqlj2f 2025-01-23 07:44:35+00:00| seen|...