OPENSUSE-SU-2024:14567-1 govulncheck-vulndb-0.0.20241209T183251-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20241209T183251-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES12 Security Update : kernel (Live Patch 57 for SLE 12 SP5) (SUSE-SU-2024:4197-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4197-1 advisory. This update for the Linux Kernel 4.12.14-122219 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory le...

OPENSUSE-SU-2024:14568-1 python310-Django-5.1.4-1.1 on GA media

These are all security issues fixed in the python310-Django-5.1.4-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES15 Security Update : kernel (Live Patch 43 for SLE 15 SP3) (SUSE-SU-2024:4264-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4264-1 advisory. This update for the Linux Kernel 5.3.18-15030059158 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use...

SUSE SLES15 Security Update : kernel (Live Patch 50 for SLE 15 SP2) (SUSE-SU-2024:4248-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4248-1 advisory. This update for the Linux Kernel 5.3.18-15020024197 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memor...

2024-12 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5048671)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2024-12 Cumulative Update for Windows 10 Version 1507 for x64-based Systems (KB5048703)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

December 10, 2024—KB5048661 (OS Build 17763.6659) - EXPIRED

None None...

December 10, 2024—KB5048685 (OS Builds 22621.4602 and 22631.4602)

None None...

December 10, 2024—KB5048703 (OS Build 10240.20857) - EXPIRED

None None...

GeoServer < 2.23.3 Multiples Vulnerabilities

According to its banner, the version of GeoServer running on the remote host is prior to 2.23.3. It is, therefore, affected by Multiples Vulnerabilities : - A Stored Cross-Site Scripting XSS vulnerability in Style Publisher - A Stored Cross-Site Scripting XSS vulnerability in REST Resources API...

CVE-2024-40582

creationtimestamp| type| source ---|---|--- 2024-12-09 15:55:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113623679448406024 2024-12-09 15:55:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113623679462789687 2024-12-09 18:02:53+00:00| seen| https://t.me/cvedetector/124...

CVE-2024-12224 vulnerabilities

Vulnerabilities for packages: pixi, berg, wadm, qdrant, wasmtime, wash, helix, starship, rye, lychee, parseable, samply, zellij, wasmcloud, shadowsocks-rust, linkerd2-proxy, bat, convco, atuin, buck2, sdp-k8s-injector, netavark, fnm, nushell, xh, tealdeer, geckodriver, kdash, wizer, rustup, deno,...

SUSE-SU-2024:4266-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024111 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2024-35905: Fixed int overflow for...

SUSE-SU-2024:4261-1 Security update for the Linux Kernel (Live Patch 50 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122183 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks bsc1229273...

Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : WebKitGTK vulnerabilities (USN-7142-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7142-1 advisory. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious...

GLSA-202412-08 : icinga2: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202412-08 icinga2: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Icinga2. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...

OPENSUSE-SU-2024:14565-1 python310-Django4-4.2.17-1.1 on GA media

These are all security issues fixed in the python310-Django4-4.2.17-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14566-1 squid-6.12-1.1 on GA media

These are all security issues fixed in the squid-6.12-1.1 package on the GA media of openSUSE Tumbleweed...

Fixed in Apache Tomcat 11.0.2

Important: Remote Code Execution via write enabled Default Servlet. Mitigation for CVE-2024-50379 was incomplete - CVE-2024-56337 The previous mitigation for CVE-2024-50379 was incomplete. In addition to upgrading to 11.0.2 or later, users running Tomcat on a case insensitive file system with the...