CGA-PR32-RJ8X-27GG

Bulletin has no description...

SUSE: Security Advisory (SUSE-SU-2024:1923-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-36400 nano-id is unable to generate the correct character set

nano-id is a unique string ID generator for Rust. Affected versions of the nano-id crate incorrectly generated IDs using a reduced character set in the nanoid::base62 and nanoid::base58 functions. Specifically, the base62 function used a character set of 32 symbols instead of the intended 62...

SUSE CVE-2020-3996

Velero prior to 1.4.3 and 1.5.2 in some instances doesn't properly manage volume identifiers which may result in information leakage to unauthorized users...

CVE-2024-36783

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection via the hosttime parameter in the NTPSyncWithHost function...

ruby: ReDoS vulnerability in URI

A flaw was found in the rubygem URI. The URI parser mishandles invalid URLs that have specific characters, which causes an increase in execution time parsing strings to URI objects. This may result in a regular expression denial of service ReDoS...

Fedora: Security Advisory (FEDORA-2024-01a9916e9e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-4779

The Unlimited Elements For Elementor Free Widgets, Addons, Templates plugin for WordPress is vulnerable to SQL Injection via the ‘datapostids0’ parameter in all versions up to, and including, 1.5.107 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on...

xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent

A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which may lead to an application crash or remo...

MGASA-2024-0190 Updated chromium-browser-stable packages fix security vulnerabilities

The chromium-browser-stable package has been updated to the 125.0.6422.60 release. It includes 9 security fixes. Please, do note, only x8664 is supported from now on. i586 support for linux was stopped some years ago and the community is not able to provide patches anymore for the latest Chromium...

CVE-2024-4985

creationtimestamp| type| source ---|---|--- 2024-05-21 15:30:05+00:00| published-proof-of-concept| https://t.me/HackingInsights/731 2024-05-21 18:24:28+00:00| seen| https://t.me/thehackernews/4990 2024-05-21 19:29:47+00:00| seen| https://t.me/KomunitiSiber/1979 2024-05-21 19:50:50+00:00| seen|...

PT-2024-11290 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the Linux kernel, where the MHI Mobile Host Interface core does not properly validate channel IDs when processing command completions. This could lead to out-of-boun...

PT-2024-40029 · Catalyst · Sentry

Name of the Vulnerable Software and Affected Versions: OpenCFP affected versions not specified Description: The issue concerns the third-party authentication framework Sentry, developed by Cartalyst, which is used in OpenCFP. It stems from how Sentry handles password reset checks, specifically wh...

Intel Arc Control Software Advisory - Lenovo Support US

No description provided...

Intel ProSet Wireless WiFi and Bluetooth Advisory - Lenovo Support US

No description provided...

Intel Ethernet Adapters and Intel Ethernet Controller I225 Advisory - Lenovo Support US

No description provided...

CVE-2024-4817

A vulnerability has been found in Campcodes Online Laundry Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file manageuser.php of the component HTTP Request Parameter Handler. The manipulation of the argument id leads to improper control of resourc...

SUSE-SU-2024:1647-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-27389: Fixed pstore inode handling with dinvalidate bsc1223705. - CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places bsc1223824. -...

Laundry Management System 安全漏洞

Laundry Management System is a laundry management system. A security vulnerability exists in version 1.0 of the Online Laundry Management System due to an improper control of resource identifiers in the id parameter of the manageuser.php file...

Intel® BIOS Guard and PPAM Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® BIOS Guard and Platform Properties Assessment Module PPAM firmware may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-28402 Descriptio...