3729 matches found
SUSE CVE-2024-50121
In the Linux kernel, the following vulnerability has been resolved: nfsd: cancel nfsdshrinkerwork using sync mode in nfs4stateshutdownnet In the normal case, when we excute echo 0 /proc/fs/nfsd/threads, the function nfs4statedestroynet in nfs4stateshutdownnet will release all resources related to...
RHEL 6 / 7 : AMQ Clients 2.3.1 (RHSA-2019:0886)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0886 advisory. Red Hat AMQ Clients enable connecting, sending, and receiving messages over the AMQP 1.0 wire transport protocol to or from AMQ Broker 6 and 7...
CVE-2024-51432
Cross Site Scripting vulnerability in FiberHome HG6544C RP2743 allows an attacker to execute arbitrary code via the SSID field in the WIFI Clients List not being sanitized...
[SECURITY] Fedora 40 Update: xorg-x11-server-Xwayland-24.1.4-1.fc40
Xwayland is an X server for running X clients under Wayland...
CVE-2024-51432
The CVE-2024-51432 entry concerns FiberHome HG6544C RP2743, where the SSID field in the WIFI Clients List is not properly sanitized, enabling Cross Site Scripting that can lead to arbitrary code execution. Affected component: SSID handling in the WIFI Clients List on FiberHome HG6544C RP2743. Roo...
CVE-2024-51432
Cross Site Scripting vulnerability in FiberHome HG6544C RP2743 allows an attacker to execute arbitrary code via the SSID field in the WIFI Clients List not being sanitized...
CVE-2024-51432
Cross Site Scripting vulnerability in FiberHome HG6544C RP2743 allows an attacker to execute arbitrary code via the SSID field in the WIFI Clients List not being sanitized...
CLSA-2024-1730369054 squid: Fix of CVE-2023-5824
CVE-2023-5824: Fix improper handling of structural elements to prevent DoS attacks against HTTP and HTTPS clients...
[SECURITY] Fedora 41 Update: xorg-x11-server-Xwayland-24.1.4-1.fc41
Xwayland is an X server for running X clients under Wayland...
Squid 安全漏洞
Squid is a suite of proxy server and web caching server software from Squid open source. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A security vulnerability exists in versions prior to Squid 6.10, which stems from vulnerability...
EulerOS Virtualization 2.12.0 : glib2 (EulerOS-SA-2024-2768)
According to the versions of the glib2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus- based client subscribes to...
CVE-2024-10134
creationtimestamp| type| source ---|---|--- 2024-10-19 12:59:09+00:00| seen| https://t.me/cvedetector/8358 2024-10-19 15:27:50+00:00| seen| https://t.me/HackerArsenal/565...
[SECURITY] Fedora 40 Update: rust-tower-0.5.1-1.fc40
Tower is a library of modular and reusable components for building robust clients and servers...
[SECURITY] Fedora 39 Update: rust-tower-0.5.1-1.fc39
Tower is a library of modular and reusable components for building robust clients and servers...
[SECURITY] Fedora 39 Update: rust-tower0.4-0.4.13-1.fc39
Tower is a library of modular and reusable components for building robust clients and servers...
CVE-2023-32189 Insecure handling SSH key in SUSE Manager when bootstrapping new clients
Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys...
Qnap QTS Bash OS Command Injection (CVE-2014-7169)
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the...
Qnap QTS Cleartext Transmission of Sensitive Information (CVE-2023-34972)
A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to read the contents of unexpected sensitive data via unspecified vectors. We have already fixed the...
CVE-2024-47080 matrix-js-sdk keys sent via `sendSharedHistoryKeys` vulnerable to interception by malicious homeserver
matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript. In matrix-js-sdk versions versions 9.11.0 through 34.7.0, the method MatrixClient.sendSharedHistoryKeys is vulnerable to interception by malicious homeservers. The method was introduced by MSC3061 and is commonly used to...