12577 matches found
RHSA-2024:11130 Red Hat Security Advisory: gstreamer1-plugins-base security update
Bulletin has no description...
RHSA-2024:11122 Red Hat Security Advisory: gstreamer1-plugins-good security update
Bulletin has no description...
RHSA-2024:11120 Red Hat Security Advisory: gstreamer1-plugins-base security update
Bulletin has no description...
RHSA-2024:11121 Red Hat Security Advisory: gstreamer1-plugins-good security update
Bulletin has no description...
RHSA-2024:11118 Red Hat Security Advisory: gstreamer1-plugins-base security update
Bulletin has no description...
RHSA-2024:11117 Red Hat Security Advisory: gstreamer1-plugins-base security update
Bulletin has no description...
RHSA-2024:11048 Red Hat Security Advisory: python-virtualenv security update
Bulletin has no description...
PT-2024-36267 · Dotstore · Dotstore Advance Menu Manager
Name of the Vulnerable Software and Affected Versions: Dotstore Advance Menu Manager versions 3.1.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Dotstore Advance Menu Manager. This vulnerability allows for unauthorized access. Recommendations: For...
OpenVINO™ Model Server Software Advisory
Summary: Potential security vulnerability in the OpenVINO™ model server software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-32048 Description: Improper input validation in the OpenVINO™ Model...
PT-2024-36730 · Optimizely · Optimizely Configured Commerce
Name of the Vulnerable Software and Affected Versions: Optimizely Configured Commerce versions prior to 5.2.2408 Description: The issue allows malicious payloads to be stored and subsequently executed in users' browsers under specific conditions. This is a result of XSS from JavaScript in an SVG...
MGASA-2024-0391 Updated curl packages fix security vulnerability
When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but...
Hackers Exploit Webview2 to Deploy CoinLurker Malware and Evade Security Detection
Bogus software update lures are being used by threat actors to deliver a new stealer malware called CoinLurker. "Written in Go, CoinLurker employs cutting-edge obfuscation and anti-analysis techniques, making it a highly effective tool in modern cyber attacks," Morphisec researcher Nadav Lorber...
SUSE-SU-2024:4347-1 Security update for installation-images
This update updates installation-images and tftpboot images to contain the latest shim for secure boot...
Advisory ROSA-SA-2024-2544
software: tomcat 9.0.37 WASP: ROSA-CHROME packageevrstring: tomcat-9.0.37-6 CVE-ID: CVE-2020-13943 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: An HTTP/2 vulnerability in Apache Tomcat allows an attacker to access unwanted resources. CVE-STATUS: The vulnerability has been resolved CVE-REV: To close t...
PT-2024-24181 · Rizin · Rizin
Name of the Vulnerable Software and Affected Versions: rizin versions prior to 0.6.3 Description: The issue is related to improper neutralization of special elements via the meta set function in librz/analysis/meta. This occurs due to the improper handling of special elements. Recommendations: Fo...
PT-2024-17289 · WordPress · Tithe.Ly Giving Button
Name of the Vulnerable Software and Affected Versions: Tithe.ly Giving Button WordPress plugin versions 1.1 and earlier Description: The issue concerns a Stored Cross-Site Scripting vulnerability. It arises because the plugin does not validate and escape some of its shortcode attributes before...
PT-2024-36160 · Unknown · Wp-Nerd Toolkit
Name of the Vulnerable Software and Affected Versions: WP-NERD Toolkit versions n/a through 1.1 Description: The issue is related to the exposure of sensitive system information to an unauthorized control sphere. This problem affects the WP-NERD Toolkit, allowing unauthorized access to confidenti...
DSA-5832-1 gstreamer1.0 - security update
Bulletin has no description...
PT-2024-16023 · Telerik · Telerik Ui For Wpf
Name of the Vulnerable Software and Affected Versions: Telerik UI for WPF versions prior to 2024 Q4 2024.4.1213 Description: A code execution attack is possible through an insecure deserialization vulnerability. This issue affects Telerik UI for WPF and can be exploited, allowing for code...