SUSE-SU-2024:3151-1 Security update for buildah

This update for buildah fixes the following issues: Update to version 1.35.4: Bump to Buildah v1.35.4 CVE-2024-3727 updates bsc1224117 integration test: handle new labels in 'bud and test --unsetlabel' Bump go-jose CVE-2024-28180 Bump ocicrypt and go-jose CVE-2024-28180 Update to version 1.35.3:...

PT-2024-01: OS Command Injection in PT Network Attack Discovery (PT NAD)

The vulnerability was identified in PT NAD affecting versions 12.0.x to 12.0.577. The vulnerability can be exploited by an attacker with network access to PT NAD to remotely execute OS commands as a superuser. Ability of exploitation depends on the configuration. Authorization is not required for...

WordPress plugin and WordPress cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Composer Data Forgery Issue Vulnerability

composer is a software application . Provides a statement to manage and install dependencies for PHP projects. A security vulnerability exists in Composer. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...

ROS-2-2174

2.2174 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...

Apple macOS Monterey 缓冲区错误漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. A buffer overflow vulnerability exists in Apple macOS Monterey versions prior to 12.5, which stems from allowing local users to access potentially sensitive information. Install the update...

MTN Group: Remote code injection in Log4j on https://mymtn.mtncongo.net - CVE-2021-44228

The website https://mymtn.mtncongo.net was vulnerable to remote code injection due to the CVE-2021-44228 vulnerability in the Log4j library. This critical vulnerability allowed for remote command execution...

MTN Group: Remote code injection in Log4j on http://mtn1app.mtncameroon.net - CVE-2021-44228

The vulnerability CVE-2021-44228, a remote code injection flaw in Log4j, was discovered on the website http://mtn1app.mtncameroon.net. The vulnerability was confirmed to be present on the ports 8080 and 8443 of the website. The issue was demonstrated by retrieving the hostname of the affected...

Google Android Buffer Error Vulnerability

Google Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. Google Android Pixel has a security vulnerability, there is currently no information about this vulnerability, please stay tuned to CNNVD or the manufacturer's announcement...

Microsoft Windows Multiple Vulnerabilities (KB4565541)

This host is missing a critical security update according to Microsoft KB4565541 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Threat Outbreak Alert RuleID31116: Email Messages Distributing Malicious Software on October 26, 2017

Medium Alert ID: 55703 First Published: 2017 October 26 14:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31116 may contain the following files: Name |...

Telerik Web UI contains cryptographic weakness

Overview The Telerik Web UI, versions R2 2017 2017.2.503 and prior, is vulnerable to a cryptographic weakness which an attacker can exploit to extract encryption keys. Description CWE-326: Inadequate Encryption Strength - CVE-2017-9248The Telerik.Web.UI.dll is vulnerable to a cryptographic...

Threat Outbreak Alert RuleID28356: Email Messages Distributing Malicious Software on March 17, 2017

Medium Alert ID: 53065 First Published: 2017 March 17 15:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28356 may contain the following files: Name | Si...

BlackStratus LOGStorm Hardcoded 'webserveruser' Credentials (HTTP)

BlackStratus LOGStorm has hardcoded credentials SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:blackstratus:logstorm";...

Threat Outbreak Alert RuleID22199: Email Messages Distributing Malicious Software on April 9, 2016

Medium Alert ID: 44596 First Published: 2016 April 11 13:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22199 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID20124: Email Messages Distributing Malicious Software on December 16, 2015

Medium Alert ID: 42727 First Published: 2015 December 16 20:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20124 may contain the following files: Name |...

NetGear WNDR Authentication Bypass / Information Disclosure

A number of NetGear WNDR devices contain an embedded SOAP service that is seemingly for use with the NetGear Genie application. This service allows for viewing and setting of certain router parameters. This SOAP service is prone to an authentication bypass. SPDX-FileCopyrightText: 2015 Greenbone ...

Threat Outbreak Alert RuleID10965: Email Messages Distributing Malicious Software on August 6, 2014

Medium Alert ID: 35183 First Published: 2014 August 6 20:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10965 may contain the following files: Name | Si...

phpFox <= 3.0.1 (ajax.php) Remote Command Execution Exploit

No description provided by source. ?php / ----------------------------------------------------------- phpFox = 3.0.1 ajax.php Remote Command Execution Exploit ----------------------------------------------------------- author.............: Egidio Romano aka EgiX mail...............:...

smartermail 7.3 & 7.4 - Multiple Vulnerabilities

No description provided by source. Author: Hoyt LLC Research | http://xss.cx | http://cloudscan.me Identified: October 28, 2010 Vendor: SmarterTools Application: SmarterMail 7.x Bugs: Stored XSS, Reflected XSS, Directory Traversal, File Upload Parameters, OS Execution, XML Injection, LDAP...