[SECURITY] [DSA 5737-1] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5737-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 05, 2024 https://www.debian.org/security/faq -...

PT-2024-5025

Name of the Vulnerable Software and Affected Versions: Kubernetes versions prior to 1.27.16 Kubernetes versions prior to 1.28.12 Kubernetes versions prior to 1.29.7 Kubernetes versions prior to 1.30.4 Description: A security issue was discovered in Kubernetes clusters with Windows nodes where...

PT-2024-14775

Name of the Vulnerable Software and Affected Versions phpseclib versions 1.0.0 through 1.0.21 phpseclib versions 2.0.0 through 2.0.45 phpseclib versions 3.0.0 through 3.0.32 Description The issue arises from the incorrect handling of certain characters in Subject Alternative Name fields within TL...

PT-2024-4368

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 15.8 through 16.11.5 GitLab CE/EE versions 17.0 through 17.0.3 GitLab CE/EE versions 17.1 through 17.1.1 Description An issue in GitLab CE/EE allows an attacker to trigger a pipeline as another user under certain...

PT-2024-4751 · Splunk · Splunk Cloud Platform +1

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 9.2.2 Splunk Enterprise versions prior to 9.1.5 Splunk Enterprise versions prior to 9.0.10 Splunk Cloud Platform versions prior to 9.1.2312.200 Splunk Cloud Platform versions prior to 9.1.2308.207...

PT-2024-10559 · Symfony · Symfony Webprofiler

Name of the Vulnerable Software and Affected Versions: Symfony WebProfiler bundle versions 2.0.X through 2.5.X Description: The Symfony Web Profiler, a development tool, should not be enabled on production servers due to the sensitive information it provides about a Symfony project. If enabled in...

PT-2024-35626 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 11.11 through 16.10.6 GitLab CE/EE versions 16.11 through 16.11.3 GitLab CE/EE versions 17.0 through 17.0.1 Description: An issue has been discovered in GitLab CE/EE where a Guest user can view dependency lists of privat...

PT-2024-40506 · Microsoft +1 · Sql Server +1

Name of the Vulnerable Software and Affected Versions: Laravel versions prior to 6.20.26 Laravel versions prior to 7.30.5 Laravel versions prior to 8.40.0 Description: The issue affects users of SQL Server with Laravel who allow user input to be passed directly to the limit and offset functions,...

PT-2024-22050 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.5 iPadOS versions prior to 17.5 tvOS versions prior to 17.5 watchOS versions prior to 10.5 macOS Sonoma versions prior to 14.5 Description: A path handling issue was addressed with improved validation, which may allow...

OESA-2024-1545 ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks such as Perl. Security Fixes: An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the...

PT-2024-28847 · National Instruments · Ni Instrumentstudio +1

Name of the Vulnerable Software and Affected Versions: NI FlexLogger versions prior to 2024 Q1 NI InstrumentStudio versions prior to 2024 Q1 Description: A deserialization of untrusted data issue exists in common code used by FlexLogger and InstrumentStudio, potentially resulting in remote code...

PT-2024-11571 · Nuki · Nuki Smart Lock 2.0 +1

Name of the Vulnerable Software and Affected Versions: Nuki Smart Lock 3.0 versions 3.0 through 3.3.4 Nuki Smart Lock 2.0 versions 2.0 through 2.12.3 Description: An issue was discovered on certain Nuki Home Solutions devices, where some BLE commands could be called from unprivileged accounts,...

PT-2024-33781 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 16.1.0 through 16.11.4 GitLab CE/EE versions 17.0.0 through 17.0.2 GitLab CE/EE versions 17.1.0 Description: An issue has been discovered in GitLab CE/EE that allowed for a CSRF attack on GitLab's GraphQL API, leading to...

PT-2024-3040 · WordPress · Forminator

Name of the Vulnerable Software and Affected Versions: Forminator versions prior to 1.29.0 Description: The issue is related to an unrestricted upload of files with dangerous types in the Forminator plugin for WordPress. This could allow a remote attacker to upload arbitrary files to the server,...

CVE-2024-32463 phlex makes Cross-site Scripting (XSS) possible due to improper sanitisation of `href` attributes on `<a>` tags

phlex is an open source framework for building object-oriented views in Ruby. There is a potential cross-site scripting XSS vulnerability that can be exploited via maliciously crafted user data. The filter to detect and prevent the use of the javascript: URL scheme in the href attribute of an tag...

PT-2024-15170 · WordPress · The Pods – Custom Content Types/Fields

Name of the Vulnerable Software and Affected Versions: The Pods – Custom Content Types and Fields plugin for WordPress versions prior to 3.0.11, excluding versions 2.7.31.2, 2.8.23.2, and 2.9.19.2 Description: The issue allows authenticated attackers with contributor level access or higher to...

PT-2024-20411 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 8.1.x through 8.1.10 Mattermost versions 9.3.x through 9.3.2 Mattermost versions 9.4.x through 9.4.3 Mattermost versions 9.5.x through 9.5.1 Description: The issue is related to the failure of Mattermost to authenticate th...

PT-2024-22574 · Ibm · Ibm Application Gateway +1

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access versions 10.0.0 through 10.0.7 IBM Application Gateway versions 20.01 through 24.03 Description: The issue allows a remote attacker to obtain highly sensitive private information or cause a denial of service using a...

PT-2024-23308

Name of the Vulnerable Software and Affected Versions Collabora Online voilà dashboard versions prior to 0.2.17 Collabora Online voilà dashboard versions prior to 0.3.8 Collabora Online voilà dashboard versions prior to 0.4.4 Collabora Online voilà dashboard versions prior to 0.5.6 Description Th...

PT-2024-18764

Name of the Vulnerable Software and Affected Versions Samsung Camera versions prior to 12.1.0.31 in Android 12 Samsung Camera versions prior to 13.1.02.07 in Android 13 Samsung Camera versions prior to 14.0.01.06 in Android 14 Description The issue is related to improper handling of insufficient...