5461 matches found
Rocky Linux 8 : grafana (RLSA-2024:3265)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:3265 advisory. golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 grafana: vulnerable to authorization bypass CVE-2024-1313...
GHSA-4Q22-422G-M4PJ vulnerabilities
Vulnerabilities for packages: sonarqube-10...
CVE-2024-37280 vulnerabilities
Vulnerabilities for packages: sonarqube-10...
GHSA-32CJ-5WX4-GQ8P vulnerabilities
Vulnerabilities for packages: vault...
GHSA-2HMF-46V7-V6FX vulnerabilities
Vulnerabilities for packages: zot, guac, dagger, melange...
CVE-2024-5798 vulnerabilities
Vulnerabilities for packages: vault...
GHSA-4C7Q-M7HC-PC92 vulnerabilities
Vulnerabilities for packages: sonarqube-10, elasticsearch-fips, elasticsearch...
CVE-2024-23445 vulnerabilities
Vulnerabilities for packages: sonarqube-10...
CLSA-2024-1718192341 Update of alt-php
Bump epoch Disable ESM notification after installation: - remove ESM hook for apt-system - remove ESM infra/apps repositories from apt sources list Automatically mark some pytest to skip if FIPS kernel is running in a disabled state they always fail in this mode...
PT-2024-10388 · Palo Alto Networks · Palo Alto Networks Globalprotect
Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect affected versions not specified Description: The issue is related to an insufficient certification validation in the GlobalProtect app, allowing attackers to connect the app to arbitrary servers. This can enab...
GHSA-2CWW-FGMG-4JQC vulnerabilities
Vulnerabilities for packages: keycloak-fips...
GHSA-7JMW-8259-Q9JX vulnerabilities
Vulnerabilities for packages: traefik-fips, traefik...
GHSA-69FP-7C8P-CRJR vulnerabilities
Vulnerabilities for packages: keycloak-fips...
CVE-2024-24789 vulnerabilities
Vulnerabilities for packages: aws-flb-kinesis-fips, kube-state-metrics, nerdctl, nodetaint, kubevela, trillian-fips, newrelic-prometheus-configurator, mkcert, vault-k8s-fips, node-feature-discovery, secrets-store-csi-driver-provider-gcp, grpc-health-probe, nvidia-nsight-compute-12.8, sops,...
CVE-2024-24790 vulnerabilities
Vulnerabilities for packages: aws-flb-kinesis-fips, kube-state-metrics, nerdctl, nodetaint, kubevela, trillian-fips, newrelic-prometheus-configurator, mkcert, vault-k8s-fips, node-feature-discovery, secrets-store-csi-driver-provider-gcp, grpc-health-probe, nvidia-nsight-compute-12.8, sops,...
CVE-2024-4540 vulnerabilities
Vulnerabilities for packages: keycloak-fips...
Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Uncontrolled Resource Consumption (CVE-2024-2511)
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service. This problem can occur in...
EulerOS 2.0 SP12 : shim (EulerOS-SA-2024-1776)
According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summar...