RHSA-2024:11130 Red Hat Security Advisory: gstreamer1-plugins-base security update

Bulletin has no description...

RHSA-2024:11141 Red Hat Security Advisory: gstreamer1-plugins-base security update

Bulletin has no description...

RHSA-2024:11122 Red Hat Security Advisory: gstreamer1-plugins-good security update

Bulletin has no description...

RHSA-2024:11120 Red Hat Security Advisory: gstreamer1-plugins-base security update

Bulletin has no description...

RHSA-2024:11121 Red Hat Security Advisory: gstreamer1-plugins-good security update

Bulletin has no description...

RHSA-2024:11118 Red Hat Security Advisory: gstreamer1-plugins-base security update

Bulletin has no description...

RHSA-2024:11117 Red Hat Security Advisory: gstreamer1-plugins-base security update

Bulletin has no description...

RHSA-2024:11048 Red Hat Security Advisory: python-virtualenv security update

Bulletin has no description...

OpenVINO™ Model Server Software Advisory

Summary: Potential security vulnerability in the OpenVINO™ model server software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-32048 Description: Improper input validation in the OpenVINO™ Model...

PT-2024-36267 · Dotstore · Dotstore Advance Menu Manager

Name of the Vulnerable Software and Affected Versions: Dotstore Advance Menu Manager versions 3.1.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Dotstore Advance Menu Manager. This vulnerability allows for unauthorized access. Recommendations: For...

PT-2024-36730 · Optimizely · Optimizely Configured Commerce

Name of the Vulnerable Software and Affected Versions: Optimizely Configured Commerce versions prior to 5.2.2408 Description: The issue allows malicious payloads to be stored and subsequently executed in users' browsers under specific conditions. This is a result of XSS from JavaScript in an SVG...

MGASA-2024-0391 Updated curl packages fix security vulnerability

When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but...

Hackers Exploit Webview2 to Deploy CoinLurker Malware and Evade Security Detection

Bogus software update lures are being used by threat actors to deliver a new stealer malware called CoinLurker. "Written in Go, CoinLurker employs cutting-edge obfuscation and anti-analysis techniques, making it a highly effective tool in modern cyber attacks," Morphisec researcher Nadav Lorber...

SUSE-SU-2024:4347-1 Security update for installation-images

This update updates installation-images and tftpboot images to contain the latest shim for secure boot...

Advisory ROSA-SA-2024-2544

software: tomcat 9.0.37 WASP: ROSA-CHROME packageevrstring: tomcat-9.0.37-6 CVE-ID: CVE-2020-13943 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: An HTTP/2 vulnerability in Apache Tomcat allows an attacker to access unwanted resources. CVE-STATUS: The vulnerability has been resolved CVE-REV: To close t...

PT-2024-24181 · Rizin · Rizin

Name of the Vulnerable Software and Affected Versions: rizin versions prior to 0.6.3 Description: The issue is related to improper neutralization of special elements via the meta set function in librz/analysis/meta. This occurs due to the improper handling of special elements. Recommendations: Fo...

DSA-5832-1 gstreamer1.0 - security update

Bulletin has no description...

PT-2024-36718 · Amiro.Cms · Amiro.Cms

Name of the Vulnerable Software and Affected Versions: Amiro.CMS versions prior to 7.8.4 Description: A Cross-Site Request Forgery vulnerability in Amiro.CMS allows remote attackers to create an administrator account. Recommendations: For Amiro.CMS versions prior to 7.8.4, update to version 7.8.4...

PT-2024-36160 · Unknown · Wp-Nerd Toolkit

Name of the Vulnerable Software and Affected Versions: WP-NERD Toolkit versions n/a through 1.1 Description: The issue is related to the exposure of sensitive system information to an unauthorized control sphere. This problem affects the WP-NERD Toolkit, allowing unauthorized access to confidenti...

PT-2024-16023 · Telerik · Telerik Ui For Wpf

Name of the Vulnerable Software and Affected Versions: Telerik UI for WPF versions prior to 2024 Q4 2024.4.1213 Description: A code execution attack is possible through an insecure deserialization vulnerability. This issue affects Telerik UI for WPF and can be exploited, allowing for code...