Moderate: Red Hat Security Advisory: haproxy security update

An update for haproxy is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...

Huawei HarmonyOS和Huawei EMUI 安全漏洞

Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei Huawei.Huawei EMUI is a mobile operating system based on Android development.Huawei HarmonyOS is an operating system. Provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS and...

RHEL 8 : haproxy (RHSA-2024:8849)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:8849 advisory. The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haproxy: untrimm...

Moderate: haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers CVE-2023-45539 For more details about the security issues, including th...

Huawei HarmonyOS和Huawei EMUI 安全漏洞

Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei Huawei.Huawei EMUI is a mobile operating system based on Android development.Huawei HarmonyOS is an operating system. Provides a full-scenario distributed operating system based on a microkernel. An out-of-bounds...

The vulnerability of the Fortinet FortiADC application delivery controller’s Web Application Firewall component allows a hacker to access confidential information.

The vulnerability of the Fortinet FortiADC application delivery controller’s Web Application Firewall component is related to improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

The vulnerability of the _asyncio._swap_current_task component in the Python interpreter allows a attacker to access confidential information.

The vulnerability of the asyncio.swapcurrenttask function in the Python interpreter is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential information...

PT-2025-2105 · Drupal · Ohdear Integration

Name of the Vulnerable Software and Affected Versions: OhDear Integration versions 0.0.0 through 2.0.3 Description: The issue is related to incorrect authorization in the OhDear Integration module for Drupal, allowing forceful browsing. This can enable a remote attacker to access confidential...

The vulnerability of Acronis Cyber Protect 16’s data protection software lies in its use of an unprotected communication channel for data transmission, allowing attackers to gain unauthorized access to confidential information.

The vulnerability of Acronis Cyber Protect 16 data protection software lies in the use of an unprotected communication channel for data transmission. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to confidential information...

The vulnerability of the software for generating real-time failure reports in Sentry arises from the need to insert confidential information into the transmitted data. This allows a intruder to gain access to confidential information.

The vulnerability of the software for generating real-time failure reports in Sentry relates to the insertion of confidential information into the transmitted data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

The vulnerability of Starlette’s tools for creating asynchronous web services in Python lies in the improper restriction of the path name for a limited directory. This allows attackers to gain access to confidential information.

The vulnerability of Starlette’s tools for creating asynchronous web services in Python is related to an improper restriction on the path name of a limited directory. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

The vulnerability of the Linux operating system’s crypto kernel component, which allows a hacker to gain unauthorized access to confidential information

The vulnerability of the Linux operating system’s crypto kernel component is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information within the system...

ROS-20241021-03

Vulnerability of the tic4xprintcond function of the opcodes/tic4x-dis.c component of the GNU development tool Binutils is related to memory initialization errors. Exploitation of the vulnerability allows an attacker, acting remotely, to gain access to confidential data...

ROS-20241017-06

A vulnerability in the PeCoffLoaderRelocateImage function of the Tianocore EDK2 library is related to the invocation of memory corruption memory due to overflow through a contiguous network. Exploitation of the vulnerability allows an attacker acting remotely to gain unauthorized access to...

The vulnerability of the Linux operating system’s kernel, which allows a hacker to obtain encryption keys

The vulnerability of the Linux operating system’s kernel is related to the storage of confidential information in an open manner during the processing of DCP keys. Exploiting this vulnerability can allow a perpetrator to obtain encryption keys...

The vulnerability of D-Link DIR-X4860, DIR-X5460A1, and COVR-X1870 wireless routers allows a intruder to gain unauthorized access to confidential information.

The vulnerability of D-Link DIR-X4860, DIR-X5460A1, and COVR-X1870 wireless routers lies in the use of rigidly encrypted login credentials. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to confidential information by forcing the telnet service to operate...

CVE-2024-47884

foxmarks is a CLI read-only interface for Firefox's bookmarks and history. A temporary file was created under the /tmp directory with read permissions for all users containing a copy of Firefox's database of bookmarks, history, input history, visits counter, use counter, view counter and more...

Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2024-2537)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROS-20241008-05

A vulnerability in the ProcXkbGetKbdByName function of the xkb/xkb.c component of the Wayland protocol implementation for X.Org XWayland, an implementation of the X Window System X.Org Server is related to incorrect memory freeing before deleting the last link. Exploitation of the vulnerability...

The vulnerability of the ring-buffer component in the Linux operating system’s kernel allows a hacker to gain unauthorized access to confidential information within the system.

The vulnerability of the ring-buffer component in the Linux operating system’s kernel is related to insufficient protection of service data when processing request parameters. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information within the...