6619 matches found
UBUNTU-CVE-2024-50026
In the Linux kernel, the following vulnerability has been resolved: scsi: wd33c93: Don't use stale scsipointer value A regression was introduced with commit dbb2da557a6a "scsi: wd33c93: Move the SCSI pointer to private command data" which results in an oops in wd33c93intr. That commit added the...
CVE-2024-50026 scsi: wd33c93: Don't use stale scsi_pointer value
In the Linux kernel, the following vulnerability has been resolved: scsi: wd33c93: Don't use stale scsipointer value A regression was introduced with commit dbb2da557a6a "scsi: wd33c93: Move the SCSI pointer to private command data" which results in an oops in wd33c93intr. That commit added the...
Malicious code in ml-linear-regression-lib (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-10045 Malicious code in ml-linear-regression-lib (PyPI)
--- -= Per source details. Do not edit below this line.=-...
GitHub Patches Critical Flaw in Enterprise Server Allowing Unauthorized Instance Access
GitHub has released security updates for Enterprise Server GHES to address multiple issues, including a critical bug that could allow unauthorized access to an instance. The vulnerability, tracked as CVE-2024-9487, carries a CVS score of 9.5 out of a maximum of 10.0 "An attacker could bypass SAML...
DLA-3921-1 apache2 - regression update
Bulletin has no description...
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2024-2505)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 7 : docker (RHSA-2020:2653)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2653 advisory. - Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to...
EulerOS 2.0 SP12 : httpd (EulerOS-SA-2024-2505)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Encoding problem in modproxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services,...
EulerOS 2.0 SP11 : httpd (EulerOS-SA-2024-2557)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution viabackend...
EulerOS 2.0 SP11 : httpd (EulerOS-SA-2024-2583)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution viabackend...
[SECURITY] [DSA 5729-2] apache2 regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-5729-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 08, 2024 https://www.debian.org/security/faq -...
DSA-5729-2 apache2 - regression update
Bulletin has no description...
SUSE-SU-2024:3524-1 Security update for frr
This update for frr fixes the following issue: - Arithmetic overflow when parsing attribute of update packet due to regression introduced by the fix for CVE-2017-15865. bsc1230866...
libldb bug fix update
An update is available for libldb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libldb packages provide an extensible library that implements an LDAP-like...
BIT-ENVOY-2024-7207
A flaw was found in Envoy. It is possible to modify or manipulate headers from external clients when pass-through routes are used for the ingress gateway. This issue could allow a malicious user to forge what is logged by Envoy as a requested path and cause the Envoy proxy to make requests to...
CVE-2024-7207
Rejected reason: Duplicate of CVE-2024-45806...
EulerOS 2.0 SP10 : httpd (EulerOS-SA-2024-2440)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Encoding problem in modproxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services,...
SUSE: Security Advisory (SUSE-SU-2024:3208-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...