12715 matches found
PT-2024-6687 · Openssh +7 · Openssh +7
Name of the Vulnerable Software and Affected Versions: OpenSSH versions 9.5 through 9.7 Description: The issue is related to a logic error in the ObscureKeystrokeTiming function, which can lead to timing attacks against echo-off password entry, such as those used for su and Sudo. This could...
SUSE-SU-2024:2162-1 Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-15040024108 fixes several issues. The following security issues were fixed: - CVE-2024-26852: Fixed use-after-free in ip6routempathnotify bsc1223059. - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi bsc1221302. - CVE-2022-48651: Fixed an...
CGA-Q5HM-R52V-WGMM
Bulletin has no description...
PT-2024-20179 · Sony · Sony Xav-Ax5500
Name of the Vulnerable Software and Affected Versions: Sony XAV-AX5500 affected versions not specified Description: This issue allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not required to exploit this issue...
(Pwn2Own) Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of software updates. The issue results from the lack of...
CVE-2024-38359 Lightning Network Daemon Onion Bomb
The Lightning Network Daemon lnd - is a complete implementation of a Lightning Network node. A parsing vulnerability in lnd's onion processing logic and lead to a DoS vector due to excessive memory allocation. The issue was patched in lnd v0.17.0. Users should update to a version v0.17.0 to be...
MGASA-2024-0228 Updated python-scikit-learn packages fix security vulnerability
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the stopwords...
CVE-2024-36117 Path traversal while serving Reposilite javadoc expanded files
Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. Reposilite v3.5.10 is affected by an Arbitrary File Read vulnerability via path traversal while serving expanded javadoc files. Reposilite has addressed this issue in version...
CGA-GXV9-QM8W-5MJX
Bulletin has no description...
KLA70302 Multiple vulnerabilities in Apache Tomcat
Multiple vulnerabilities were found in Apache Tomcat. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in excessive HTTP headers when processing an HTTP/2 stream can be exploited to cause...
PT-2024-26719 · Unknown · Wpsoul Greenshift
Name of the Vulnerable Software and Affected Versions: Wpsoul Greenshift – animation and page builder blocks versions through 8.8.9.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XS...
Multiple vulnerabilities in Ricoh Streamline NX PC Client
Overview Ricoh Streamline NX PC Client provided by RICOH COMPANY, LTD. contains multiple vulnerabilities listed below. ricoh-2024-000004 Improper restriction of communication channel to intended endpoints CWE-923 - CVE-2024-36252 ricoh-2024-000005 Use of hard-coded credentials CWE-798 -...
JVN#00442488: Multiple vulnerabilities in Ricoh Streamline NX PC Client
Ricoh Streamline NX PC Client provided by RICOH COMPANY, LTD. contains multiple vulnerabilities listed below. Improper restriction of communication channel to intended endpoints CWE-923 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Base Score 6.3 CVE-2024-36252 ricoh-2024-000004 Use of hard-coded...
OPENSUSE-SU-2024:13493-1 python310-pydrive2-1.16.2-1.1 on GA media
These are all security issues fixed in the python310-pydrive2-1.16.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13400-1 phpPgAdmin-7.14.6-1.1 on GA media
These are all security issues fixed in the phpPgAdmin-7.14.6-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10732-1 eclipse-contributor-tools-4.15-3.6 on GA media
These are all security issues fixed in the eclipse-contributor-tools-4.15-3.6 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11014-1 libxkbcommon-devel-1.3.1-1.2 on GA media
These are all security issues fixed in the libxkbcommon-devel-1.3.1-1.2 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11339-1 ruby2.7-rubygem-multi_xml-0.6.0-1.14 on GA media
These are all security issues fixed in the ruby2.7-rubygem-multixml-0.6.0-1.14 package on the GA media of openSUSE Tumbleweed...