GHSA-F8X4-F32R-W556 Duplicate Advisory: PyO3 has a risk of use-after-free in `borrowed` reads from Python weak references

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6jgw-rgmm-7cv6. This link is maintained to preserve external references. Original Advisory The family of functions to read "borrowed" values from Python weak references were fundamentally unsound, because the we...

[SECURITY] [DLA 3912-1] linux security update

Debian LTS Advisory DLA-3912-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings October 07, 2024 https://wiki.debian.org/LTS Package : linux Version : 5.10.226-1 CVE ID : CVE-2021-3669 CVE-2022-48733 CVE-2023-31083 CVE-2023-52889 CVE-2024-27397 CVE-2024-38577...

PT-2024-29431 · Cadclick · Cadclick

Name of the Vulnerable Software and Affected Versions: CADClick versions 1.11.0 and earlier Description: A reflected cross-site scripting XSS vulnerability is present in "Artikel.aspx" in CADClick, allowing remote attackers to inject arbitrary web script or HTML via the searchindex parameter. Thi...

PT-2024-38966 · WordPress · Social Web Suite – Social Media Auto Post

Name of the Vulnerable Software and Affected Versions: The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress versions up to, and including, 4.1.11 Description: The issue concerns a Directory Traversal vulnerability, which allows unauthenticated attackers to...

CGA-RC47-529W-379H

Bulletin has no description...

CGA-JJP3-5CMX-W4RW

Bulletin has no description...

CGA-84Q7-CGVW-43WM

Bulletin has no description...

CGA-7W94-V262-G4JV

Bulletin has no description...

CGA-4WW6-MC53-65XG

Bulletin has no description...

CGA-36X6-QHP6-M367

Bulletin has no description...

RHSA-2016:2672 Red Hat Security Advisory: chromium-browser security update

Bulletin has no description...

RHSA-2015:0009 Red Hat Security Advisory: kernel security update

Bulletin has no description...

RHSA-2010:0103 Red Hat Security Advisory: flash-plugin security update

Bulletin has no description...

RHSA-2008:0244 Red Hat Security Advisory: java-1.5.0-bea security update

Bulletin has no description...

Exploit for Use of Hard-coded Credentials in Solarwinds Web_Help_Desk

Description : The SolarWinds Web Help Desk WHD software is...

DEBIAN-CVE-2024-45306

Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cursor position always points inside a line and does not become invalid by pointing beyond the end of a line. Back then we assumed this loop ...

CVE-2024-20089

In wlan, there is a possible denial of service due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08861558; Issue ID: MSV-1526...

CVE-2023-49198 Apache SeaTunnel Web: Arbitrary file read vulnerability

Mysql security vulnerability in Apache SeaTunnel. Attackers can read files on the MySQL server by modifying the information in the MySQL URL allowLoadLocalInfile=true&allowUrlInLocalInfile=true&allowLoadLocalInfileInPath=/&maxAllowedPacket=655360 This issue affects Apache SeaTunnel: 1.0.0. Users...

PT-2024-8567 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions ID18.5.2 and earlier Adobe InDesign version ID19.4 Description: The issue is related to a heap-based buffer overflow in dynamic memory, which could allow an attacker to execute arbitrary code. Exploitation of this issu...

PT-2024-18813 · WordPress · Remote Content Shortcode

Name of the Vulnerable Software and Affected Versions: Remote Content Shortcode plugin for WordPress versions up to, and including, 1.5 Description: The issue allows authenticated attackers with contributor-level access and above to make web requests to arbitrary locations originating from the we...