CGA-P8V9-PMWV-375F

Bulletin has no description...

CGA-JJMQ-QMWG-QJFQ

Bulletin has no description...

CGA-H3HF-JW4F-QH99

Bulletin has no description...

CGA-WVQ2-99X5-6R7W

Bulletin has no description...

CGA-VPJM-QX66-36CG

Bulletin has no description...

CGA-R2VH-PFMH-4JRJ

Bulletin has no description...

CGA-CWVJ-PCR9-7GHJ

Bulletin has no description...

CGA-94J6-PFVR-6XXM

Bulletin has no description...

CGA-7WMW-97C9-7MR2

Bulletin has no description...

SUSE-SU-2024:1699-1 Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issues: - CVE-2022-48622: Fixed files rejection with multiple anih chunks bsc1219276...

SUSE-SU-2024:1636-2 Security update for tpm2.0-tools

This update for tpm2.0-tools fixes the following issues: - CVE-2024-29038: Fixed arbitrary quote data validation by tpm2checkquote bsc1223687. - CVE-2024-29039: Fixed pcr selection value to be compared with the attest bsc1223689...

Phormer vulnerable to cross-site scripting

Overview Phormer contains a cross-site scripting vulnerability CWE-79. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary script may be executed on t...

Multiple vulnerabilities in MosP kintai kanri

Overview MosP kintai kanri provided by esMind, LLC contains multiple vulnerabilities listed below. Path Traversal CWE-22 - CVE-2024-28880 Incorrect Permission Assignment for Critical Resource CWE-732 - CVE-2024-29078 Kentaro Ishii of GMO Cybersecurity by Ierae, Inc. reported these vulnerabilities...

JVN#97751842: Multiple vulnerabilities in MosP kintai kanri

MosP kintai kanri provided by esMind, LLC contains multiple vulnerabilities listed below. Path Traversal CWE-22 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Base Score 6.5 CVE-2024-28880 Incorrect Permission Assignment for Critical Resource CWE-732 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Bas...

SUSE-SU-2024:1500-1 Security update for avahi

This update for avahi fixes the following issues: - CVE-2023-38472: Fixed denial of service due to a reachable assertion found in avahirdataparse bsc1216853 - CVE-2023-38470: Fixed denial of service due to a reachable assertion found in avahiescapelabel bsc1215947...

DSA-5679-1 less - security update

Bulletin has no description...

LINE client for iOS vulnerable to improper server certificate verification

Overview The financial module within LINE client for iOS lacks server certificate verification in log transmission CWE-295, CVE-2023-5554. LINE Corporation reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact The communication may be eavesdropped under a...

PT-2024-3704 · Omron · Cx-One +1

Name of the Vulnerable Software and Affected Versions: CX-One versions 4.61.1 and earlier Sysmac Studio versions 1.56 and earlier Description: The issue is related to the use of a function that frees a pointer not at the start of a buffer, which can be exploited to execute arbitrary code. This ca...

SUSE-SU-2024:1294-1 Security update for emacs

This update for emacs fixes the following issues: - CVE-2024-30203: Fixed treating inline MIME contents as trusted bsc1222053 - CVE-2024-30204: Fixed LaTeX preview enabled by default for e-mail attachments bsc1222052 - CVE-2024-30205: Fixed Org mode considering contents of remote files as trusted...

LoLLMs 安全漏洞

LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A security vulnerability exists in LoLLMs that stems from inadequate protection of sensitive endpoints, allowing unauthorized access to endpoints such as /restartprogram, /updatesoftware, /,...