CVE-2024-49973 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-49973 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-50044 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-50044 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

openSUSE 15 Security Update : cobbler (openSUSE-SU-2024:0382-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0382-1 advisory. Update to 3.3.7: Security: Fix issue that allowed anyone to connect to the API as admin CVE-2024-47533, boo1231332 bind - Fix bug that prevents cname...

SUSE: Security Advisory (SUSE-SU-2024:4282-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : kernel (Live Patch 51 for SLE 15 SP2) (SUSE-SU-2024:4247-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:4247-1 advisory. This update for the Linux Kernel 5.3.18-15020024200 fixes one issue. The following security issue was fixed: - CVE-2024-43861: Fix memory leak for not ...

openSUSE 15 Security Update : chromium (openSUSE-SU-2024:0377-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0377-1 advisory. - Chromium 131.0.6778.85 stable released 2024-11-19 boo1233534 CVE-2024-11395: Type Confusion in V8 Tenable has extracted the preceding description block...

CVE-2024-54133

Action Pack is a framework for handling and responding to web requests. There is a possible Cross Site Scripting XSS vulnerability in the contentsecuritypolicy helper starting in version 5.2.0 of Action Pack and prior to versions 7.0.8.7, 7.1.5.1, 7.2.2.1, and 8.0.0.1. Applications which set...

CVE-2024-54133

Action Pack is a framework for handling and responding to web requests. There is a possible Cross Site Scripting XSS vulnerability in the contentsecuritypolicy helper starting in version 5.2.0 of Action Pack and prior to versions 7.0.8.7, 7.1.5.1, 7.2.2.1, and 8.0.0.1. Applications which set...

SUSE-SU-2024:4276-1 Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-1504002497 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553...

Fedora 41 : rust-rustls (2024-0d14d0d2f9)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-0d14d0d2f9 advisory. Update to version 0.23.19. This version includes fix for RUSTSEC-2024-0399. Tenable has extracted the preceding description block directly from the Fedora...

Critical Photon OS Security Update - PHSA-2024-3.0-0807

Updates of 'glib' packages of Photon OS have been released...

Oracle Linux 8 : ruby:2.5 (ELSA-2024-10850)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-10850 advisory. - Fix REXML ReDoS vulnerability CVE-2024-49761. rubygem-abrt Tenable has extracted the preceding description block directly from the Oracle Linux security...

Debian dsa-5827 : proftpd-basic - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5827 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5827-1 [email protected] https://www.debian.org/security/...

squid-6.12-1.1 on GA media (moderate)

squid-6.12-1.1 on GA media Announcement ID: openSUSE-SU-2024:14566-1 Rating: moderate Cross-References: CVE-2024-45802 CVSS scores: CVE-2024-45802 SUSE : 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H CVE-2024-45802 SUSE : 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H...

Security update for qt6-webengine (moderate)

openSUSE Security Update: Security update for qt6-webengine Announcement ID: openSUSE-SU-2024:0402-1 Rating: moderate References: 1233764 Cross-References: CVE-2024-11403 CVSS scores: CVE-2024-11403 SUSE: 6.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L Affected Products: openSUSE Backports...

SUSE CVE-2024-53141

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add missing range check in bitmapipuadt When tbIPSETATTRIPTO is not present but tbIPSETATTRCIDR exists, the values of ip and ipto are slightly swapped. Therefore, the range check for ip should be done later, but...

skopeo-1.16.1-2.1 on GA media (moderate)

skopeo-1.16.1-2.1 on GA media Announcement ID: openSUSE-SU-2024:14562-1 Rating: moderate Cross-References: CVE-2024-9676 CVSS scores: CVE-2024-9676 SUSE : 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2024-9676 SUSE : 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

python310-jupyter-ydoc-3.0.0-2.1 on GA media (moderate)

python310-jupyter-ydoc-3.0.0-2.1 on GA media Announcement ID: openSUSE-SU-2024:14559-1 Rating: moderate Cross-References: CVE-2024-21538 CVSS scores: CVE-2024-21538 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2024-21538 SUSE : 5.6...

CVE-2024-50404

A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations. We have already fixed the vulnerability in the following versions: Qsync Central...

CVE-2024-50388

An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to execute commands. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.1.673 and later...