RHEL 7 : db4 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libdb: Reads DBCONFIG from the current working directory CVE-2017-10140 - Vulnerability in the Data Store...

Object-Store Profiler Command Handler Clustered Data ONTAP Unauthorized Access

The vulnerability of the Object-Store Profiler Command Handler component in the operating system of Clustered Data ONTAP storage systems relates to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

DEBIAN-CVE-2024-36896

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix access violation during port device removal Testing with KASAN and syzkaller revealed a bug in port.c:disablestore: usbhubtostructhub can return NULL if the hub that the port belongs to is concurrently removed, but...

UBUNTU-CVE-2024-36896

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix access violation during port device removal Testing with KASAN and syzkaller revealed a bug in port.c:disablestore: usbhubtostructhub can return NULL if the hub that the port belongs to is concurrently removed, but...

Unable to add store to Citrix Workspace App for Windows when Forcepoint agent is installed

When adding a StoreFront store to Citrix Workspace App for Windows, the Google multi-factor authentication page does not load correctly if Forcepoint agent is installed. The authentication form only partially loads. Without Forcepoint agent, the problem disappears...

SUSE CVE-2021-47366

In the Linux kernel, the following vulnerability has been resolved: afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server AFS-3 has two data fetch RPC variants, FS.FetchData and FS.FetchData64, and Linux's afs client switches between them when talking to a non-YFS server if the read...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (etcd) security update

An update for etcd is now available for Red Hat OpenStack Platform 16.2 Train. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-glance-store) security update

An update for python-glance-store is now available for Red Hat OpenStack Platform 17.1 Wallaby. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

glance-store: Glance Store access key logged in DEBUG log level

A vulnerability was found in python-glance-store. The issue occurs when the package logs the accesskey for the glance-store when the DEBUG log level is enabled...

vantage6-algorithm-store (>=4.3.0b3, <=4.4.1), vantage6-node (>=4.0.0a2, <=4.4.1) +1 more potentially affected by CVE-2024-32969 via vantage6 (>=4.0.0a2, <=4.4.1)

vantage6 PYPI version =4.0.0a2, =4.3.0b3, =4.0.0a2, =4.0.0a2, =4.4.1 Source cves: CVE-2024-32969 Source advisory: OSV:GHSA-99R4-CJP4-3HMX...

vantage6-algorithm-store (>=4.3.0b3, <=4.4.1), vantage6-node (>=4.0.0a2, <=4.4.1) +1 more potentially affected by CVE-2024-32969 via vantage6 (>=4.0.0a2, <=4.4.1)

vantage6 PYPI version =4.0.0a2, =4.3.0b3, =4.0.0a2, =4.0.0a2, =4.4.1 Source cves: CVE-2024-32969 Source advisory: GHSA-99R4-CJP4-3HMX...

RHEL 9 : Red Hat OpenStack Platform 17.1 (python-glance-store) (RHSA-2024:2732)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:2732 advisory. OpenStack image service store library Security Fixes: Glance Store access key logged in DEBUG log level CVE-2024-1141 For more details about the...

UBUNTU-CVE-2023-52781

In the Linux kernel, the following vulnerability has been resolved: usb: config: fix iteration issue in 'usbgetbosdescriptor' The BOS descriptor defines a root descriptor and is the base descriptor for accessing a family of related descriptors. Function 'usbgetbosdescriptor' encounters an iterati...

DEBIAN-CVE-2021-47366

In the Linux kernel, the following vulnerability has been resolved: afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server AFS-3 has two data fetch RPC variants, FS.FetchData and FS.FetchData64, and Linux's afs client switches between them when talking to a non-YFS server if the read...

CVE-2024-35220: Insufficient Session Expiration

@fastify/session is a session plugin for fastify. Requires the @fastify/cookie plugin. When restoring the cookie from the session store, the expires field is overriden if the maxAge field was set. This means a cookie is never correctly detected as expired and thus expired sessions are not...

PT-2024-27025

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A missing memory barrier in the tls init function can cause a NULL dereference in tls setsockopt,getsockopt due to store-store reordering. This issue can be observed when the ctx-sk prot...

CVE-2024-35816

A vulnerability was found in the Linux kernel's FireWire OHCI driver, which could lead to a resource leak by leaving behind an interrupt request IRQ when a device is unbound. This issue may cause instability or improper handling of IRQs, potentially affecting system performance or reliability...

Rocketsoft Rocket LMS cross-site scripting vulnerability

RocketSoft Rocket LMS is a full-featured Learning Management System from RocketSoft, Inc. A security vulnerability exists in Rocketsoft Rocket LMS version 1.9 that stems from the presence of a cross-site scripting XSS vulnerability that allows administrators to store JavaScript payloads using the...

dev3-store.myracehorse.com Cross Site Scripting vulnerability OBB-3928070

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Ultimate Store Kit Elementor Addons <= 1.6.2 - Unauthenticated PHP Object Injection

Description The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.6.2 via deserialization of untrusted...