CVE-2024-49952 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-49952 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

php:8.2 security update

libzip php 8.2.25-1 - rebase to 8.2.25 RHEL-66166 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip...

GHSA-VM32-9RQF-RH3R vulnerabilities

Vulnerabilities for packages: pnpm...

CVE-2024-53866 vulnerabilities

Vulnerabilities for packages: pnpm...

CVE-2024-54152

Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex undisclosed payload, one can get full access...

[SECURITY] Fedora 40 Update: rust-rbspy-0.24.0-3.fc40

Sampling CPU profiler for Ruby...

CVE-2024-55635

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Core allows Cross-Site Scripting XSS.This issue affects Drupal Core: from 7.0 before 7.102...

CVE-2024-12393

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Core allows Cross-Site Scripting XSS.This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8...

CVE-2024-55636

Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. Drupal core contains a chain of methods that is exploitable when an insecure deserialization...

CVE-2024-55634

A vulnerability in Drupal Core allows Privilege Escalation.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8...

CVE-2024-55637

Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. Drupal core contains a chain of methods that is exploitable when an insecure deserialization...

CVE-2024-55601

Hugo is a static site generator. Starting in version 0.123.0 and prior to version 0.139.4, some HTML attributes in Markdown in the internal templates listed below not escaped in internal render hooks. Those whoa re impacted are Hugo users who do not trust their Markdown content files and are usin...

GHSA-H97M-WW89-6JMQ vulnerabilities

Vulnerabilities for packages: shadowsocks-rust, parseable, bat, zellij, rye, cargo-audit, buck2, wash, tealdeer, linkerd2, pixi, netavark, rust-analyzer, geckodriver, helix, qdrant, wizer, deno, rustup, berg, kdash, sdp-k8s-injector, linkerd2-proxy, starship, xh, lychee, nushell, convco, wasmtime...

CVE-2024-12224 vulnerabilities

Vulnerabilities for packages: shadowsocks-rust, parseable, bat, zellij, rye, cargo-audit, buck2, wash, tealdeer, linkerd2, pixi, netavark, rust-analyzer, geckodriver, helix, qdrant, wizer, deno, rustup, berg, kdash, sdp-k8s-injector, linkerd2-proxy, starship, xh, lychee, nushell, convco, wasmtime...

GHSA-MWCW-C2X4-8C55 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, jitsucom-jitsu...

CVE-2024-55565 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, jitsucom-jitsu...

CVE-2024-46901

Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. All versions of Subversion up to and including...

CVE-2024-53143

In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix ordering of iput and watchedobjects decrement Ensure the superblock is kept alive until we're done with iput. Holding a reference to an inode is not allowed unless we ensure the superblock stays alive, which fsnotif...

IBM Db2 安全漏洞

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from a denial-of-service vulnerability that can be exploited by an attacker to cause a...

CVE-2024-12254

Starting in Python 3.12.0, the asyncio.SelectorSocketTransport.writelines method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not periodically drain the write buffer...