PT-2024-41012 · Unknown · Govulncheck-Vulndb

Name of the Vulnerable Software and Affected Versions: govulncheck-vulndb versions prior to 0.0.20241028T152002 Description: The issue concerns updates to the govulncheck-vulndb, which includes various Go CVE Numbering Authority IDs that have been added or updated. No specific details about the...

[SECURITY] [DLA 3939-1] python-git security update

Debian LTS Advisory DLA-3939-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert October 29, 2024 https://wiki.debian.org/LTS Package : python-git Version : 3.1.14-1+deb11u1 CVE ID : CVE-2022-24439 CVE-2023-40267 CVE-2023-41040 Debian Bug : 1027163 1043503 GitPython...

Debian dla-3938 : exim4 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3938 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3938-1 [email protected]...

openSUSE 15 Security Update : chromium (openSUSE-SU-2024:0341-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0341-1 advisory. Chromium 130.0.6723.69 boo1232060 CVE-2024-10229: Inappropriate implementation in Extensions CVE-2024-10230: Type Confusion in V8 CVE-2024-10231:...

Withdrawn Advisory: go-mysql affected by go.uuid's Predictable UUID Identifiers

Withdrawn Advisory This advisory has been withdrawn because the vulnerability does not affect a released version of the github.com/go-mysql-org/go-mysql package. For more information, see https://github.com/github/advisory-database/pull/4990. Original Advisory Affected by CVE-2021-3538...

CVE-2022-30361

OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserType. No authentication is required. The information disclosed is associated with the registered user ID, status, email address, roles, user type, license type, and personal detai...

Debian dsa-5796 : heif-gdk-pixbuf - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5796 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5796-1 [email protected] https://www.debian.org/securit...

USN-7081-1: Go vulnerabilities

It was discovered that the Go net/http module did not properly handle responses to requests with an "Expect: 100-continue" header under certain circumstances. An attacker could possibly use this issue to cause a denial of service. CVE-2024-24791 It was discovered that the Go parser module did not...

The vulnerability of the Linux operating system’s crypto kernel component, which allows a hacker to gain unauthorized access to confidential information

The vulnerability of the Linux operating system’s crypto kernel component is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information within the system...

The vulnerability of the mhi component in the Linux operating system’s kernel allows a hacker to gain unauthorized access to confidential information.

The vulnerability of the mhi component in the Linux operating system’s kernel is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information within the system...

[SECURITY] [DLA 3933-1] dmitry security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3933-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk October 22, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3927-1] openjdk-17 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3927-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 21, 2024 https://wiki.debian.org/LTS -...

USN-7072-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Watchdog drivers; - Netfilter; - Network traffic control; CVE-2024-38630, CVE-2024-27397, CVE-2024-45016...

CVE-2024-4211

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels. Multiple missing permission checks - ALM job config has been discovered in OpenText Application Automation...

CVE-2024-47945

The devices are vulnerable to session hijacking due to insufficient entropy in its session ID generation algorithm. The session IDs are predictable, with only 32,768 possible values per user, which allows attackers to pre-generate valid session IDs, leading to unauthorized access to user sessions...

CVE-2024-9904

creationtimestamp| type| source ---|---|--- 2024-10-13 04:42:24+00:00| seen| https://t.me/cvedetector/7777 2024-10-13 14:10:43+00:00| seen| https://t.me/HackerArsenal/546...

[SECURITY] [DLA 3916-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3916-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 12, 2024 https://wiki.debian.org/LTS -...

CVE-2020-1456

creationtimestamp| type| source ---|---|--- 2024-10-09 19:59:05+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2518 2025-03-02 11:46:28+00:00| seen| Telegram/Km9gcRJ-PStd5h4tHMmt4rQnkSox9bnmGNHQu1h5QIrVDU9 2025-03-02 11:46:28+00:00| seen|...

Improper Ownership Management

Overview Affected versions of this package are vulnerable to Improper Ownership Management due to the storage and comparison of local actor IDs in the database. An attacker can impersonate another user and manipulate import requests by exploiting coinciding actor IDs across different wikis. Note:...

net-snmp: Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously

A flaw was found in net-snmp. This issue occurs due to improper input validation when simultaneously setting malformed OIDs in the master agent and subagent...