CVE-2024-37280 vulnerabilities

Vulnerabilities for packages: sonarqube-10...

GHSA-32CJ-5WX4-GQ8P vulnerabilities

Vulnerabilities for packages: vault...

GHSA-2HMF-46V7-V6FX vulnerabilities

Vulnerabilities for packages: melange, dagger, zot, guac...

CVE-2024-5798 vulnerabilities

Vulnerabilities for packages: vault...

GHSA-4C7Q-M7HC-PC92 vulnerabilities

Vulnerabilities for packages: sonarqube-10, elasticsearch-fips, elasticsearch...

CVE-2024-23445 vulnerabilities

Vulnerabilities for packages: sonarqube-10...

CLSA-2024-1718192341 Update of alt-php

Bump epoch Disable ESM notification after installation: - remove ESM hook for apt-system - remove ESM infra/apps repositories from apt sources list Automatically mark some pytest to skip if FIPS kernel is running in a disabled state they always fail in this mode...

PT-2024-10388 · Palo Alto Networks · Palo Alto Networks Globalprotect

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect affected versions not specified Description: The issue is related to an insufficient certification validation in the GlobalProtect app, allowing attackers to connect the app to arbitrary servers. This can enab...

GHSA-2CWW-FGMG-4JQC vulnerabilities

Vulnerabilities for packages: keycloak-fips...

GHSA-7JMW-8259-Q9JX vulnerabilities

Vulnerabilities for packages: traefik-fips, traefik...

GHSA-69FP-7C8P-CRJR vulnerabilities

Vulnerabilities for packages: keycloak-fips...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: kubebuilder, influx, dgraph, nri-kafka, helm-docs, aws-flb-cloudwatch-fips, cosign-fips, buf, cri-tools, docker-credential-gcr, nri-jmx, smarter-device-manager, nri-cassandra, spire-server-fips, fulcio-fips, nvidia-container-toolkit, kind, bazelisk,...

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: kubebuilder, influx, dgraph, nri-kafka, helm-docs, aws-flb-cloudwatch-fips, cosign-fips, buf, cri-tools, docker-credential-gcr, nri-jmx, smarter-device-manager, nri-cassandra, spire-server-fips, fulcio-fips, nvidia-container-toolkit, kind, bazelisk,...

CVE-2024-4540 vulnerabilities

Vulnerabilities for packages: keycloak-fips...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Uncontrolled Resource Consumption (CVE-2024-2511)

Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service. This problem can occur in...

EulerOS 2.0 SP12 : shim (EulerOS-SA-2024-1776)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summar...

CVE-2024-35311

Yubico YubiKey 5 Series before 5.7.0, Security Key Series before 5.7.0, YubiKey Bio Series before 5.6.4, and YubiKey 5 FIPS before 5.7.2 have Incorrect Access Control...

CVE-2024-35200 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

Oracle Linux 8 : openssh (ELSA-2024-3166)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3166 advisory. - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 Tenable has extracted the preceding description block directly from the Oracl...

golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads

A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs​. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.goL113. The objects leaked are pkey​ and ctx​. That functi...