SUSE SLES15 Security Update : kernel (Live Patch 50 for SLE 15 SP2) (SUSE-SU-2024:4248-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4248-1 advisory. This update for the Linux Kernel 5.3.18-15020024197 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memor...

OPENSUSE-SU-2024:14568-1 python310-Django-5.1.4-1.1 on GA media

These are all security issues fixed in the python310-Django-5.1.4-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES15 Security Update : kernel (Live Patch 43 for SLE 15 SP3) (SUSE-SU-2024:4264-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4264-1 advisory. This update for the Linux Kernel 5.3.18-15030059158 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use...

2024-12 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5048671)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2024-12 Cumulative Update for Windows 10 Version 1507 for x64-based Systems (KB5048703)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

December 10, 2024—KB5048661 (OS Build 17763.6659) - EXPIRED

None None...

December 10, 2024—KB5048685 (OS Builds 22621.4602 and 22631.4602)

None None...

December 10, 2024—KB5048703 (OS Build 10240.20857) - EXPIRED

None None...

GeoServer < 2.23.3 Multiples Vulnerabilities

According to its banner, the version of GeoServer running on the remote host is prior to 2.23.3. It is, therefore, affected by Multiples Vulnerabilities : - A Stored Cross-Site Scripting XSS vulnerability in Style Publisher - A Stored Cross-Site Scripting XSS vulnerability in REST Resources API...

CVE-2024-40582

creationtimestamp| type| source ---|---|--- 2024-12-09 15:55:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113623679448406024 2024-12-09 15:55:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113623679462789687 2024-12-09 18:02:53+00:00| seen| https://t.me/cvedetector/124...

CVE-2024-12224 vulnerabilities

Vulnerabilities for packages: wasmtime, rustup, netavark, pixi, kdash, tealdeer, cargo-audit, rye, buck2, wash, zellij, shadowsocks-rust, geckodriver, sccache, rust-analyzer, nushell, atuin, berg, convco, bat, parseable, fnm, sdp-k8s-injector, wizer, linkerd2, lychee, samply, wasmcloud, starship,...

SUSE-SU-2024:4266-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024111 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2024-35905: Fixed int overflow for...

SUSE-SU-2024:4261-1 Security update for the Linux Kernel (Live Patch 50 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122183 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks bsc1229273...

OPENSUSE-SU-2024:14565-1 python310-Django4-4.2.17-1.1 on GA media

These are all security issues fixed in the python310-Django4-4.2.17-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14566-1 squid-6.12-1.1 on GA media

These are all security issues fixed in the squid-6.12-1.1 package on the GA media of openSUSE Tumbleweed...

GLSA-202412-08 : icinga2: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202412-08 icinga2: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Icinga2. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...

Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : WebKitGTK vulnerabilities (USN-7142-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7142-1 advisory. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious...

Fixed in Apache Tomcat 11.0.2

Important: Remote Code Execution via write enabled Default Servlet. Mitigation for CVE-2024-50379 was incomplete - CVE-2024-56337 The previous mitigation for CVE-2024-50379 was incomplete. In addition to upgrading to 11.0.2 or later, users running Tomcat on a case insensitive file system with the...

GLSA-202412-02 : Cacti: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202412-02 Cacti: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Cacti. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from...

[SECURITY] [DLA 3986-1] php7.4 security update

Debian LTS Advisory DLA-3986-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin December 08, 2024 https://wiki.debian.org/LTS Package : php7.4 Version : 7.4.33-1+deb11u7 CVE ID : CVE-2024-8929 CVE-2024-8932 CVE-2024-11233 CVE-2024-11234 CVE-2024-11236 Debian Bug :...