12578 matches found
PT-2024-9202 · Libjxl +5 · Libjxl +5
Name of the Vulnerable Software and Affected Versions: LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99 libjpeg affected versions not specified libmozjs-115-0-115.15.0-4.1 libmozjs-128-0-128.5.1-3.1 libjxl-devel-0.11.1-1.1 qt6-webengine Description: An out-of-bounds...
Cisco Nexus Dashboard Fabric Controller Arbitrary Command Execution Vulnerability
A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller NDFC could allow an authenticated, low-privileged, remote attacker to perform a command injection attack against an affected device. This vulnerability is due to improper user authorization and insufficient...
Cisco Nexus Dashboard Orchestrator SSL/TLS Certificate Validation Vulnerability
A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard Orchestrator NDO could allow an unauthenticated, remote attacker to intercept sensitive information from an affected device. This vulnerability exists because the Cisco NDO Validate Peer Certificate site management feature...
Cisco Expressway Series Privilege Escalation Vulnerability
A vulnerability in the restricted shell of Cisco Expressway Series could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, the attacker must have Administrator-level...
RHSA-2024:3755 Red Hat Security Advisory: idm:DL1 security update
Bulletin has no description...
RHSA-2024:2549 Red Hat Security Advisory: skopeo security and bug fix update
Bulletin has no description...
Security Bulletin: NVIDIA CUDA Toolkit - October 2024
NVIDIA has released a software update for NVIDIA® CUDA® Toolkit. To protect your system, download and install this software update from the CUDA Toolkit Downloads page. Go to NVIDIA Product Security. Details This section provides a summary of potential vulnerabilities that this security update...
RHSA-2022:1860 Red Hat Security Advisory: maven:3.6 security and enhancement update
Bulletin has no description...
RHSA-2024:6879 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.11 security update on RHEL 8
Bulletin has no description...
Apache Tomcat improper handling of TLS handshake process data
Overview Apache Tomcat provided by The Apache Software Foundation improperly handles TLS handshake process data, which may lead to a denial-of-service DoS condition CWE-770, CVE-2024-38286. The reporter, Ozaki of North Grid Corporation, reported this issue directly to and coordinated with the...
PEAK-System PCAN-Ethernet Gateway FD 安全漏洞
PEAK-System PCAN-Ethernet Gateway FD is an Ethernet gateway from PEAK-System, Germany. A security vulnerability exists in the PEAK-System PCAN-Ethernet Gateway FD that originates from a susceptibility to command injection attacks via shell metacharacters in the processing.php software update...
PT-2024-10154 · Gitlab · Gitlab Ce/Ee
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 11.8 through 17.4.6 GitLab CE/EE versions 17.5 through 17.5.4 GitLab CE/EE versions 17.6 through 17.6.2 Description: The issue is related to an open redirect vulnerability in a GitLab CE/EE API endpoint. This could allow...
JVN#72148744: Apache Tomcat improper handling of TLS handshake process data
Apache Tomcat provided by The Apache Software Foundation improperly handles TLS handshake process data, which may lead to a denial-of-service DoS condition CWE-770, CVE-2024-38286. Impact Denial-of-service DoS attacks may be conducted through TLS connection. Solution Update the software Update...
RHSA-2024:1678 Red Hat Security Advisory: nodejs security update
Bulletin has no description...
RHSA-2023:2167 Red Hat Security Advisory: grafana security and enhancement update
Bulletin has no description...
RHSA-2021:4765 Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.19.0
Bulletin has no description...
DLA-3908-1 debian-security-support - update
Bulletin has no description...
PT-2024-9586
Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.24.10 Description A vulnerability has been detected in the format channel mask function in gst-discoverer.c, which can cause an out-of-bounds OOB read. This occurs when the gst discoverer audio info get channels...