7544 matches found
ALSA-2024:10384 Important: tuned security update
The tuned packages provide a service that tunes system settings according to a selected profile. Security Fixes: tuned: scriptpre and scriptpost options allow to pass arbitrary scripts executed by root CVE-2024-52336 tuned: improper sanitization of instancename parameter of the instancecreate...
govulncheck-vulndb-0.0.20241121T195252-1.1 on GA media (moderate)
govulncheck-vulndb-0.0.20241121T195252-1.1 on GA media Announcement ID: openSUSE-SU-2024:14519-1 Rating: moderate Cross-References: CVE-2024-52280 CVE-2024-52282 CVE-2024-52309 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These...
The vulnerability of the iopt_area_split() function in the iommufd component of Linux operating systems allows attackers to compromise the integrity and accessibility of protected information.
The vulnerability of the ioptareasplit function in the iommufd component of Linux operating systems is related to the use of memory after its release, due to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility...
[SECURITY] [DSA 5818-1] linux security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5818-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 24, 2024 https://www.debian.org/security/faq -...
Debian dsa-5817 : chromium - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5817 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5817-1 [email protected] https://www.debian.org/securit...
Debian dsa-5818 : affs-modules-6.1.0-21-4kc-malta-di - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5818 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5818-1 [email protected] https://www.debian.org/securit...
PostgreSQL row security below e.g. subqueries disregards user ID changes
...
Astra Linux – Vulnerability in LibreOffice
LibreOffice Calc can import tracked changes from a spreadsheet document. There was a heap buffer overflow issue when a document reused the same change identifier for two different types of changes. The importer treated one change object as a different, larger type and exceeded the allocated memor...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fixed a use-after-free issue related to the destruction of CM IDs. The function iwconnreqhandler associates a new struct rdmaidprivate named connid with an existing struct iwcmid named cmid as follows: c connid-cmid.iw...
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20241112T145010 2024-11-12T14:50:10Z. Refs jscPED-11136 Go CVE Numbering Authority IDs added or updated with aliases: GO-2024-3250 CVE-2024-51744 GHSA-29wx-vh33-7x7r Update to version 0.0.20241108T172500...
Sentry 安全漏洞
Sentry is an open source bug tracking and performance monitoring platform for developers from Sentry. A security vulnerability exists in Sentry version 24.11.0. An attacker can exploit the vulnerability to obtain IDs and keys...
Slackware Linux 15.0 / current php81 Multiple Vulnerabilities (SSA:2024-327-01)
The version of php81 installed on the remote host is prior to 8.1.31 / 8.3.14. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-327-01 advisory. New php packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...
AZL-53579 CVE-2024-52616 affecting package avahi for versions less than 0.8-5
A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...
AZL-53756 CVE-2024-52616 affecting package avahi for versions less than 0.8-4
A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...
PHP 8.1.x < 8.1.31 Multiple Vulnerabilities
The version of PHP installed on the remote host is prior to 8.1.31. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.1.31 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...
Broadcom SANnav 日志信息泄露漏洞
Broadcom SANnav is a suite of SAN management platforms from Broadcom USA. A log information disclosure vulnerability exists in Broadcom SANnav versions prior to 2.2.2, which stems from the printing of Fabric OS switch passwords and authorization IDs in an embedded MLS database file, which could...
authentik 安全漏洞
authentik is an open source identity provisioning application from authentik Open Source. A security vulnerability exists in authentik that stems from the presence of an insecure default configuration of OAuth2 redirect URIs, which could allow an attacker to gain undue privileges or perform...
PHP 8.3.x < 8.3.14 Multiple Vulnerabilities
The version of PHP installed on the remote host is prior to 8.3.14. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.3.14 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...
CVE-2024-11477
creationtimestamp| type| source ---|---|--- 2024-11-20 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1532/ 2024-11-22 16:40:16+00:00| seen| https://t.me/truesecator/6464 2024-11-23 09:01:40+00:00| exploited| https://t.me/kasperskyb2b/1513 2024-11-23 12:18:03+00:00| seen...