4911 matches found
[SECURITY] Fedora 40 Update: plantuml-1.2024.3-3.fc40
PlantUML is a program allowing to draw UML diagrams, using a simple and human readable text description. It is extremely useful for code documenting, sketching project architecture during team conversations and so on. PlantUML supports the following diagram types - sequence diagram - use case...
Justice Systems FullCourt Enterprise Cross-Site Scripting Vulnerability
Justice Systems FullCourt Enterprise is a case management software solution from Justice Systems. It helps courts with large and small needs manage cases efficiently from start to finish. A security vulnerability exists in Justice Systems FullCourt Enterprise version v.8.2, which stems from the...
jgit: arbitrary file overwrite
Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...
jgit: arbitrary file overwrite
Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...
jgit: arbitrary file overwrite
Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...
CVE-2023-34351
creationtimestamp| type| source ---|---|--- 2024-03-06 14:11:51+00:00| seen| https://t.me/ctinow/201362...
BIT-ENVOY-2023-35944 Envoy vulnerable to incorrect handling of HTTP requests and responses with mixed case schemes
Envoy is an open source edge and service proxy designed for cloud-native applications. Envoy allows mixed-case schemes in HTTP/2, however, some internal scheme checks are case-sensitive. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, this can lead to the rejection of requests wit...
AZL-35579 CVE-2024-24786 affecting package keda for versions less than 2.4.0-24
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...
curl: information disclosure by exploiting a mixed case flaw
A flaw was found in curl that verifies a given cookie domain against the Public Suffix List. This issue could allow a malicious HTTP server to set "super cookies" in curl that are passed back to more origins than what is otherwise allowed or possible...
Pegasus spyware creator ordered to reveal code used to spy on WhatsApp users
A California federal judge has ordered spyware maker NSO Group to hand over the code for Pegasus and other spyware products that were used to spy on WhatsApp users. Meta-owned WhatsApp has been fighting NSO in court since 2019, after Pegasus was allegedly used against 1,400 WhatsApp users over th...
Moderate: curl security update
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: information disclosure by exploiting a mixed case flaw CVE-2023-46218 For more details about the security issues,...
CVE-2023-52503
creationtimestamp| type| source ---|---|--- 2024-03-04 21:02:23+00:00| seen| https://t.me/ctinow/199571...
Spoofing
In the Linux kernel, the following vulnerability has been resolved: IB/qib: Fix memory leak in qibusersdmaqueuepkts The wrong goto label was used for the error case and missed cleanup of the pkt allocation. Addresses-Coverity-ID: 1493352 "Resource leak"...
openSUSE: Security Advisory for modsecurity (openSUSE-SU-2023:0257-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-26548
creationtimestamp| type| source ---|---|--- 2024-02-29 21:31:46+00:00| seen| https://t.me/ctinow/197038...
CVE-2023-52484 iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Fix soft lockup triggered by armsmmumminvalidaterange When running an SVA case, the following soft lockup is triggered: -------------------------------------------------------------------- watchdog: BUG: soft...
CVE-2023-52484
CVE-2023-52484 affects the Linux kernel in iommu/arm-smmu-v3 where arm_smmu_mm_invalidate_range (renamed to arm_smmu_mm_arch_invalidate_secondary_tlbs since 6.6-rc1) can trigger a soft lockup during SVA-case TLBI range notifs. The issue is linked to not checking MAX_TLBI_OPS and near MMU tlb flus...
CVE-2023-52484 iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Fix soft lockup triggered by armsmmumminvalidaterange When running an SVA case, the following soft lockup is triggered: -------------------------------------------------------------------- watchdog: BUG: soft...
CVE-2023-52484
In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Fix soft lockup triggered by armsmmumminvalidaterange When running an SVA case, the following soft lockup is triggered: -------------------------------------------------------------------- watchdog: BUG: soft...