20954 matches found
SUSE-SU-2024:3288-1 Security update for golang-github-prometheus-prometheus
This update for golang-github-prometheus-prometheus fixes the following issues: - Require Go 1.20 for building - Bump go-retryablehttp to version 0.7.7 CVE-2024-6104, bsc1227038 - Migrate from disabled to manual service mode - Add0003-Bump-go-retryablehttp.patch - Update to 2.45.6 jscPED-3577:...
CVE-2024-40866
The issue was addressed with improved UI. This issue is fixed in Safari 18, macOS Sequoia 15. Visiting a malicious website may lead to address bar spoofing...
Wire UI 安全漏洞
Wire UI is a component and repository of Wire UI open source. It is used to support Laravel and Livewire application development. Wire UI has a security vulnerability that stems from insufficient cleaning or escaping of user input. An attacker can exploit the vulnerability to inject malicious...
Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 129 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 129.0.6668.58 Linux 129.0.6668.58/.59 Windows, Mac contains a number of fixes and improvements -- a list of changes is...
PT-2024-31783 · Wire Ui · Wire Ui
Name of the Vulnerable Software and Affected Versions: Wire UI versions prior to 1.19.3 Wire UI versions prior to 2.1.3 Description: A potential Cross-Site Scripting XSS vulnerability has been identified in the "/wireui/button" endpoint, specifically through the label query parameter. Malicious...
Google Chrome < 129.0.6668.58 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 129.0.6668.58. It is, therefore, affected by multiple vulnerabilities as referenced in the 202409stable-channel-update-for-desktop17 advisory. - Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.58...
Google Chrome < 129.0.6668.58 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 129.0.6668.58. It is, therefore, affected by multiple vulnerabilities as referenced in the 202409stable-channel-update-for-desktop17 advisory. - Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.58...
KLA73437 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in V8 can be...
CVE-2024-40866
CVE-2024-40866 affects WebKitGTK/WebKit2GTK. Visiting a malicious website may lead to address bar spoofing. Public advisories confirm fixes via package updates across distros: Debian (2.46.0-2~deb12u1 for bookworm; newer LTS entries exist), AlmaLinux 8/9 webkit2gtk3 advisories, Fedora package-ann...
PT-2024-29055 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7 macOS versions prior to 14.7 macOS versions prior to 15 Description: This issue was addressed through improved state management. Visiting a malicious website may lead to user interface spoofing. Recommendations: F...
RHSA-2019:3024 Red Hat Security Advisory: ovirt-web-ui security and bug fix update
Bulletin has no description...
RHSA-2017:0161 Red Hat Security Advisory: python-XStatic-jquery-ui security update
Bulletin has no description...
RHSA-2016:2933 Red Hat Security Advisory: python-XStatic-jquery-ui security update
Bulletin has no description...
RHSA-2016:2115 Red Hat Security Advisory: openstack-manila-ui security update
Bulletin has no description...
RHSA-2016:2117 Red Hat Security Advisory: openstack-manila-ui security update
Bulletin has no description...
RHSA-2016:2932 Red Hat Security Advisory: python-XStatic-jquery-ui security update
Bulletin has no description...
CVE-2024-44685
The vulnerability CVE-2024-44685 affects Titan SFTP and Titan MFT Server versions 2.0.25.2426 and earlier. The root cause is that passwords and other sensitive data are exposed in clear text within the JSON response when configuring SMTP settings via the Web UI. This impacts confidentiality (high...
CVE-2024-44685
Titan SFTP and Titan MFT Server 2.0.25.2426 and earlier have a vulnerability a vulnerability where sensitive information, including passwords, is exposed in clear text within the JSON response when configuring SMTP settings via the Web UI...
MindsDB Cross-site Scripting vulnerability
A cross-site scripting XSS vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI...
GHSA-32FJ-R8QW-R8W8 MindsDB Cross-site Scripting vulnerability
A cross-site scripting XSS vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI...