OPENSUSE-SU-2024:14470-1 govulncheck-vulndb-0.0.20241106T172143-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20241106T172143-1.1 package on the GA media of openSUSE Tumbleweed...

RHEL 8 : virt:rhel and virt-devel:rhel (RHSA-2024:6964)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6964 advisory. Kernel-based Virtual Machine KVM offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contain...

Symfony < 5.4.46 / 6.x < 6.4.14 / 7.x < 7.1.7 Improper Input Handling

Symfony versions prior to 5.4.46 or 6.x prior to 6.4.14 or 7.x prior to 7.1.7 is vulnerable when the registerargcargv php directive is set to 'on' and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by the kernel when handling the...

OPENSUSE-SU-2024:14473-1 ruby3.3-rubygem-actiontext-7.0-7.0.8.6-1.1 on GA media

These are all security issues fixed in the ruby3.3-rubygem-actiontext-7.0-7.0.8.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14468-1 IPAddress-5.5.1-1.1 on GA media

These are all security issues fixed in the IPAddress-5.5.1-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-7089-3)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7089-3 advisory. Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing...

CVE-2024-10826 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-20457

creationtimestamp| type| source ---|---|--- 2024-11-06 16:30:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113436958752263481 2024-11-06 19:10:59+00:00| seen| https://t.me/cvedetector/10034 2024-11-07 14:20:08+00:00| seen|...

OPENSUSE-SU-2024:14466-1 xorg-x11-server-21.1.14-1.1 on GA media

These are all security issues fixed in the xorg-x11-server-21.1.14-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora 39 : php-tcpdf (2024-0b2854c95b)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-0b2854c95b advisory. Version 6.7.7 2024-10-26 - Update regular expression to avoid ReDoS CVE-2024-22641 - PHP 8.4 Fix: Curl CURLOPTBINARYTRANSFER deprecated 675 - SVG detection f...

OPENSUSE-SU-2024:14465-1 java-1_8_0-openjdk-1.8.0.432-1.1 on GA media

These are all security issues fixed in the java-180-openjdk-1.8.0.432-1.1 package on the GA media of openSUSE Tumbleweed...

FreeBSD : chromium -- multiple security fixes (ab254c9d-9c36-11ef-8c1c-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ab254c9d-9c36-11ef-8c1c-a8a1599412c6 advisory. Chrome Releases reports: This update includes 2 security fixes: Tenable has extracted the...

CVE-2024-47460

creationtimestamp| type| source ---|---|--- 2024-11-05 22:49:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113432788302548189 2024-11-06 00:46:38+00:00| seen| https://t.me/cvedetector/9960 2024-11-06 06:06:10+00:00| seen|...

OPENSUSE-SU-2024:14462-1 pdns-recursor-5.1.2-1.1 on GA media

These are all security issues fixed in the pdns-recursor-5.1.2-1.1 package on the GA media of openSUSE Tumbleweed...

RHEL 8 : Red Hat Product OCP Tools 4.15 Openshift Jenkins (RHSA-2024:8884)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8884 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cro...

RHEL 6 / 7 : rh-mysql56-mysql (RHSA-2018:1254)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1254 advisory. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs. The...

OPENSUSE-SU-2024:14461-1 libmozjs-128-0-128.4.0-1.1 on GA media

These are all security issues fixed in the libmozjs-128-0-128.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7088-2)

"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7088-2 advisory. Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could u...

USN-7089-2: Linux kernel vulnerabilities

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. CVE-2024-25741 Several security issues were discovered in the Linux kernel. An...

USN-7088-2: Linux kernel vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2022-36402 Several security issues were discovered in the Linux kernel. An attacker could...