CVE-2024-37794

Improper input validation in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service DoS via a crafted SMT2 input file...

MAL-2024-1622 Malicious code in @corraldev/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ce1f827fc48514e74b4bd81dc008359f2284ff02be068cbae81851f6e2056ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OPENSUSE-SU-2024:11514-1 wp-cli-2.5.0-1.2 on GA media

These are all security issues fixed in the wp-cli-2.5.0-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10644-1 aws-cli-1.20.7-2.2 on GA media

These are all security issues fixed in the aws-cli-1.20.7-2.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12695-1 cilium-cli-0.12.13-1.1 on GA media

These are all security issues fixed in the cilium-cli-0.12.13-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11108-1 oci-cli-3.0.2-1.2 on GA media

These are all security issues fixed in the oci-cli-3.0.2-1.2 package on the GA media of openSUSE Tumbleweed...

openSUSE: Security Advisory for aws (SUSE-SU-2024:1984-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2024:12787-1 oci-cli-3.23.3-1.1 on GA media

These are all security issues fixed in the oci-cli-3.23.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11175-1 platformsh-cli-3.67.2-1.2 on GA media

These are all security issues fixed in the platformsh-cli-3.67.2-1.2 package on the GA media of openSUSE Tumbleweed...

Fedora 39 : php (2024-52c23ef1ec)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-52c23ef1ec advisory. PHP version 8.2.20 06 Jun 2024 CGI: Fixed buffer limit on Windows, replacing read call usage by read. David Carlier Fixed bug GHSA-3qgc-jrrr-25jv...

SUSE-SU-2024:2003-1 Security update for cups

This update for cups fixes the following issues: - CVE-2024-35235: Fixed a bug in cupsd that could allow an attacker to change the permissions of other files in the system. bsc1225365 - Handle local 'Negotiate' authentication response for cli clients bsc1223179...

SUSE SLES15: aws-nitro-enclaves-binaryblobs-upstream / aws-nitro-enclaves-cli / etc (SUSE-SU-2024:1984-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1984-1 advisory. - CVE-2023-50711: Fixed out of bounds memory accesses in embedded vmm-sys-util bsc1218501. Tenable has extracted the preceding...

openSUSE: Security Advisory for aws (SUSE-SU-2024:1966-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 40 : php (2024-49aba7b305)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-49aba7b305 advisory. PHP version 8.3.8 06 Jun 2024 CGI: Fixed buffer limit on Windows, replacing read call usage by read. David Carlier Fixed bug GHSA-3qgc-jrrr-25jv...

@adinsure-ops/ops-cli (5.3.2), @pnp/nodejs (>=4.0.0-alpha0-v4nightly.20240416, <=4.1.1) +1 more potentially affected by CVE-2024-35255 via @azure/msal-node (>=2.7.0, <=2.9.1)

@azure/msal-node NPM version =2.7.0, =4.0.0-alpha0-v4nightly.20240416, =4.1.1 - insomnia-plugin-azure-ad-authentication 1.1.2 Source cves: CVE-2024-35255 Source advisory: OSV:GHSA-M5VV-6R4H-3VJ9...

Security Bulletin: IBM® Db2® is vulnerable to a denial of service when a specially crafted request is used via CLI. (CVE-2023-45178)

Summary IBM® Db2® is vulnerable to a denial of service when a specially crafted request is used via CLI. Vulnerability Details CVEID:CVE-2023-45178 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server CLI is vulnerable to a denial of service when a specially crafted reques...

CVE-2024-21754

A use of password hash with insufficient computational effort vulnerability CWE-916 affecting FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 6.4 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions may allow a privileged...

CVE-2024-23111

An improper neutralization of input during web page Generation 'Cross-site Scripting' vulnerability CWE-79 in FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions reboot page may allow a remote privileged...

CVE-2023-46720

A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16 and 6.0.13 through 6.0.18 allows attacker to execute unauthorized code or commands via specially crafted CLI commands...

CVE-2024-21754

A use of password hash with insufficient computational effort vulnerability CWE-916 affecting FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 6.4 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions may allow a privileged...