PT-2024-10180 · Phpoffice · Phpspreadsheet

Name of the Vulnerable Software and Affected Versions: PhpSpreadsheet versions prior to 3.7.0 PhpSpreadsheet versions prior to 2.3.5 PhpSpreadsheet versions prior to 2.1.6 PhpSpreadsheet versions prior to 1.29.7 Description: The issue is related to unauthorized reflected cross-site scripting in t...

Ubuntu: Security Advisory (USN-7166-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : prometheus-podman-exporter (2024-8d1b3f4466)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-8d1b3f4466 advisory. release v1.14.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

CGA-FJPJ-4QQH-R9MV

Bulletin has no description...

CGA-6GF7-WV3F-9F5X

Bulletin has no description...

CVE-2024-12408

creationtimestamp| type| source ---|---|--- 2024-12-21 09:27:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113690099399569893 2024-12-21 10:15:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldso7bgxby2i 2024-12-21 11:59:18+00:00| seen|...

CGA-R359-F9WJ-QJV9

Bulletin has no description...

CGA-64F3-Q6H6-R6XG

Bulletin has no description...

CGA-4X4Q-JH67-HF43

Bulletin has no description...

CGA-HMVH-96M2-WCRJ

Bulletin has no description...

CGA-HP49-8C88-WC5H

Bulletin has no description...

CGA-F9W6-Q5XQ-JH96

Bulletin has no description...

CGA-4WQ6-53M3-66GG

Bulletin has no description...

CGA-9HW9-P8P4-9H4V

Bulletin has no description...

Sophos Issues Hotfixes for Critical Firewall Flaws: Update to Prevent Exploitation

Sophos has released hotfixes to address three security flaws in Sophos Firewall products that could be exploited to achieve remote code execution and allow privileged system access under certain conditions. Of the three, two are rated Critical in severity. There is currently no evidence that the...

CVE-2024-12835

creationtimestamp| type| source ---|---|--- 2024-12-20 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1723/ 2024-12-30 16:54:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113742818764786828 2024-12-30 16:58:29+00:00| seen|...

CVE-2024-12729

creationtimestamp| type| source ---|---|--- 2024-12-19 21:04:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113681515115617439 2024-12-19 21:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldos66bptg2a 2024-12-19 23:10:58+00:00| seen|...

CVE-2024-53991

creationtimestamp| type| source ---|---|--- 2024-12-19 19:20:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113681106551870483 2024-12-19 19:23:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113681119447478911 2024-12-19 20:15:34+00:00| seen|...

CVE-2024-49336

creationtimestamp| type| source ---|---|--- 2024-12-19 17:29:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113680669150084414 2024-12-19 18:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoi4shh362x 2024-12-19 19:50:12+00:00| seen|...

RLSA-2024:10785 Important: postgresql:12 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID CVE-2024-10978 postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code CVE-2024-10979 postgresq...