PT-2024-33622 · Unknown · Sam Glover Client Power Tools Portal

Name of the Vulnerable Software and Affected Versions: Sam Glover Client Power Tools Portal versions 1.8.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...

java-17-openjdk security update

An update is available for java-17-openjdk. This update affects Rocky Linux 8, Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-17-openjdk packages provide the OpenJDK 17 Ja...

MAL-2024-9773 Malicious code in plugin-warn-if-update-available (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2022-48622 affecting package gdk-pixbuf2 for versions less than 2.42.10-2

CVE-2022-48622 affecting package gdk-pixbuf2 for versions less than 2.42.10-2. A patched version of the package is available...

CVE-2024-46782 affecting package kernel for versions less than 5.15.167.1-1

CVE-2024-46782 affecting package kernel for versions less than 5.15.167.1-1. An upgraded version of the package is available that resolves this issue...

KLA77354 DoS vulnerability in Wireshark

Denial of service vulnerability was found in Wireshark. Malicious users can exploit this vulnerability to cause denial of service. Original advisories wnpa-sec-2024-13 · AppleTalk and RELOAD Framing dissector crashes Exploitation Public exploits exist for this vulnerability. Related products...

PT-2024-12165 · Unknown · Technitium

Name of the Vulnerable Software and Affected Versions: Technitium versions through 11.0.3 Description: The issue enables attackers to conduct a DNS cache poisoning attack, allowing them to inject fake responses within 1 second. Recommendations: For versions through 11.0.3, update to a version tha...

PT-2024-30776 · Unknown · Zephyr Project Manager

Name of the Vulnerable Software and Affected Versions: Zephyr Project Manager versions 3.3.1 through 3.3.102 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability in the Zephyr Project Manager. This vulnerability allows for unauthorized access...

VMware Workstation 17.0.x < 17.5.1 Multiple Vulnerabilities (VMSA-2024-0011)

The version of VMware Workstation installed on the remote host is 17.0.x prior to 17.5.1. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

CVE-2024-40902 affecting package kernel for versions less than 6.6.35.1-1

CVE-2024-40902 affecting package kernel for versions less than 6.6.35.1-1. A patched version of the package is available...

Security Bulletin: Maximo Application Suite - IBM WebSphere Application Server Liberty is vulnerable to CVE-2024-22354 used in IBM Maximo Application Suite - Monitor Component

Summary IBM Maximo Application Suite - Monitor Component uses WebSphere Application Server Liberty which is vulnerable to CVE-2024-22354. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-22354 DESCRIPTION: IBM WebSphere Application...

Security Bulletin: Maximo Application Suite - IBM WebSphere Application Server Liberty is vulnerable to CVE-2023-51775 a denial of service due to jose4j

Summary IBM Maximo Application Suite - Monitor Component uses jose4j which is vulnerable to CVE-2023-51775. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2023-51775 DESCRIPTION: jose4j is vulnerable to a denial of service, caused by...

CVE-2024-37086

creationtimestamp| type| source ---|---|--- 2024-07-30 08:10:29+00:00| seen| https://www.cert.at/de/warnungen/2024/7/kritische-sicherheitslucke-in-vmware-esxi-aktiv-ausgenutzt-update-verfugbar...

CVE-2021-32714 affecting package rpm-ostree for versions less than 2024.4-1

CVE-2021-32714 affecting package rpm-ostree for versions less than 2024.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-27068 affecting package hyperv-daemons for versions less than 6.6.35.1-1

CVE-2024-27068 affecting package hyperv-daemons for versions less than 6.6.35.1-1. An upgraded version of the package is available that resolves this issue...

PT-2024-28199 · Wapppress · Wapppress

Name of the Vulnerable Software and Affected Versions: WappPress versions through 6.0.4 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability. This means an attacker could potentially force the server to make unintended requests, leading to various security issues...

Vulnerability fixed in HPE 3PAR Service Processor

A vulnerability has been fixed in HPE 3PAR Service Processor. An unauthenticated malicious person with access to the local network can exploit the vulnerability to bypass authentication. HPE has made an update available to fix the vulnerabilities. See the reference for more information...

Security Bulletin: IBM Maximo Application Suite: follow-redirects-1.15.5.tgz is vulnerable to CVE-2024-28849 used in IBM Maximo Application Suite - Edge Data Collector

Summary IBM Maximo Application Suite - Edge Data Collector uses follow-redirects-1.15.5.tgz which is vulnerable to CVE-2024-28849 Vulnerability Details CVEID:CVE-2024-28849 DESCRIPTION: Node.js follow-redirects module could allow a remote authenticated attacker to obtain sensitive information,...

CVE-2024-20977 affecting package mysql for versions less than 8.0.36-1

CVE-2024-20977 affecting package mysql for versions less than 8.0.36-1. An upgraded version of the package is available that resolves this issue...

Security Bulletin: Maximo Application Suite - torch-1.13.1-cp37-cp37m-manylinux1_x86_64.whl is vulnerable to multiple security CVEs used in IBM Maximo Application Suite - Monitor Component

Summary IBM Maximo Application Suite - Monitor Component uses torch-1.13.1-cp37-cp37m-manylinux1x8664.whl which is vulnerable to multiple security CVEs. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-31583 DESCRIPTION: PyTorch is...