Security Bulletin: Vulnerability in MD5 Signature and Hash Algorithm affects IBM i (CVE-2015-7575).

Summary The MD5 “SLOTH” vulnerability on TLS 1.2 affects IBM i. Vulnerability Details CVEID: CVE-2015-7575 DESCRIPTION: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS...

.NET 6.0 Update - October 08, 2024 (KB5045998)

None None...

October 8, 2024—KB5044356 (Monthly Rollup)

None None...

October 8, 2024—KB5044321 (Security-only update)

None None...

.NET 8.0 Update - October 08, 2024 (KB5045993)

None None...

October 8, 2024—KB5044342 (Monthly Rollup)

None None...

October 8, 2024-Security Only Update for .NET Framework 2.0, 3.0, 3.5 SP1, 4.6.2 for Windows Server 2008 SP2 (KB5044086)

None None...

October 8, 2024-Security Only Update for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2008 R2 SP1 (KB5044085)

None None...

KB5044272: Cumulative security update for Internet Explorer: October 8, 2024

None None...

KB5044413: Servicing stack update for Windows Server 2012: October 8, 2024

None None...

Follet School Solutions Destiny 安全漏洞

Follet School Solutions Destiny is a school solution from Follet, Inc. A security vulnerability exists in Follet School Solutions Destiny prior to version v22.0.1 AU1, which stems from arbitrary client-side code that can be run via the handleloginform.do's expiredSupportMessage parameter...

Debian dla-3913 : firefox-esr - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3913 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3913-1 [email protected]...

CVE-2024-27458

A potential security vulnerability has been identified in the HP Hotkey Support software, which might allow local escalation of privilege. HP is releasing mitigation for the potential vulnerability. Customers using HP Programmable Key are recommended to update HP Hotkey Support...

CVE-2024-27458 HP Hotkey Support – Escalation of Privilege

A potential security vulnerability has been identified in the HP Hotkey Support software, which might allow local escalation of privilege. HP is releasing mitigation for the potential vulnerability. Customers using HP Programmable Key are recommended to update HP Hotkey Support...

CVE-2024-27458 HP Hotkey Support – Escalation of Privilege

A potential security vulnerability has been identified in the HP Hotkey Support software, which might allow local escalation of privilege. HP is releasing mitigation for the potential vulnerability. Customers using HP Programmable Key are recommended to update HP Hotkey Support...

CVE-2024-27458

HP Hotkey Support is affected by a local privilege escalation vulnerability (CVE-2024-27458). The HP advisory HPSBHF03977 indicates mitigation via updates to HP Hotkey Support for affected platforms; Nessus notes the vulnerability in versions prior to 8.10.42.190. HP Programmable Key users are sp...

firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3

The Mozilla Foundation's Security Advisory: Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs show evidence of memory corruption and we presume that with enough effort, some of these could be exploited to run arbitrary code...

firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the issue as follows: Memory safety bugs are present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption, and we presume that with enough effort, some of...

firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3

The Mozilla Foundation's Security Advisory: Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs show evidence of memory corruption and we presume that with enough effort, some of these could be exploited to run arbitrary code...

PT-2024-32407 · Follett · Follet School Solutions Destiny

Name of the Vulnerable Software and Affected Versions: Follet School Solutions Destiny versions prior to 22.0.1 AU1 Description: The issue allows a remote attacker to run arbitrary client-side code via the expiredSupportMessage parameter of the "handleloginform.do" endpoint. This enables the...