RHEL 7 : dpdk (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - dpdk: Information exposure in unchecked guest physical to host virtual address translations CVE-2018-1059...

RHEL 7 : python-pip (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - python-pip: when --extra-index-url option is used and package does not already exist in the public index,...

SUSE SLED15: python3-rpm / python311-rpm / rpm / rpm-32bit / rpm-build / etc (SUSE-SU-2024:1557-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1557-1 advisory. Security fixes: - CVE-2021-3521: Fixed missing subkey binding signature checking bsc1191175 Other fixes: ...

undertow: Cookie Smuggling/Spoofing

A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized da...

undertow: Cookie Smuggling/Spoofing

A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized da...

GLSA-202405-22 : rsync: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202405-22 rsync: Multiple Vulnerabilities - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 - A flaw was found in rsync in versions since...

The vulnerability of the sub_42CB94() function (/goform/SetVirtualServerCfg) in the Tenda TX9 Pro router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sub42CB94 function /goform/SetVirtualServerCfg of the Tenda TX9 Pro router software is related to the operation of writing data beyond the buffer in memory when processing the list parameter. Exploiting this vulnerability allows an attacker to compromise the...

SUSE CVE-2024-27035

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to guarantee persisting compressed blocks by CP If data block in compressed cluster is not persisted with metadata during checkpoint, after SPOR, the data may be corrupted, let's guarantee to write compressed...

ROS-20240503-15

A vulnerability in the PSA Crypto API of the Mbed TLS and Mbed Crypto software is related to a insufficient spatial separation. Exploitation of the vulnerability could allow an attacker to have an impact the confidentiality, integrity, and availability of data Vulnerability in the...

The vulnerability of the formDelDhcpRule() function (/goform/DelDhcpRule) in the Tenda W15E router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formDelDhcpRule function /goform/DelDhcpRule in the Tenda W15E router software is related to the issue of the operation going beyond the buffer in memory when processing the delDhcpIndex parameter. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2024-4090

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a slab-use-after-free vulnerability in the msft do close function. This vulnerability is caused by a race condition where the msft-data is freed in hci release de...

ROS-20240503-14

A vulnerability in the PSA Crypto API of the Mbed TLS and Mbed Crypto software is related to a insufficient spatial separation. Exploitation of the vulnerability could allow an attacker to have an impact the confidentiality, integrity, and availability of data Vulnerability in the...

The vulnerability of the RDP client FreeRDP, related to memory-walking attacks, allows attackers to compromise the integrity of protected information.

The vulnerability of the RDP client FreeRDP relates to memory-walking attacks. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the integrity of the protected information...

Save as PDF plugin by Pdfcrowd < 3.2.1 - Missing Authorization

Description The Save as PDF plugin by Pdfcrowd plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createsamplebutton function in versions up to, and including, 3.2.0. This makes it possible for authenticated attackers, with...

kernel: RDMA/rxe: Fix incomplete state save in rxe_requester

An incorrect state restoration flaw was found in the Linux kernel's RDMA rxe soft-RoCE driver in the requester packet transmission logic. A local user with access to RDMA devices can trigger this issue when network layer packet drops occur during RDMA send operations, causing the work queue eleme...

The vulnerability in the Firefox web browser, related to the use of memory after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the Alternate Services component in the Firefox web browser, related to integer overflow, allows an attacker to compromise data integrity.

The vulnerability of the Alternative Services component in the Firefox web browser is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

The vulnerability of function R7WebsSecurityHandler (/goform/execCommand) in the Tenda AC8 router’s microprogramming system, which allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of function R7WebsSecurityHandler /goform/execCommand in the Tenda AC8 router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird arises from incorrect handling of symbolic links before accessing a file, allowing an attacker to compromise data integrity.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to an incorrect definition of symbolic links before accessing a file. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to an improper limitation on the visible layers of the user interface, allowing a malicious actor to compromise data integrity.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a remote attacker to compromise data integrity...