2801 matches found
June 25, 2024-KB5040370 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2
None None...
DEBIAN-CVE-2024-38610
In the Linux kernel, the following vulnerability has been resolved: drivers/virt/acrn: fix PFNMAP PTE checks in acrnvmrammap Patch series "mm: followpte improvements and acrn followpte fixes". Patch 1 fixes a bunch of issues I spotted in the acrn driver. It compiles, that's all I know. I'll...
CVE-2024-38610 drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map()
In the Linux kernel, the following vulnerability has been resolved: drivers/virt/acrn: fix PFNMAP PTE checks in acrnvmrammap Patch series "mm: followpte improvements and acrn followpte fixes". Patch 1 fixes a bunch of issues I spotted in the acrn driver. It compiles, that's all I know. I'll...
CVE-2024-38351 Password auth and OAuth2 unverified email linking
Pocketbase is an open source web backend written in go. In affected versions a malicious user may be able to compromise other user accounts. In order to be exploited users must have both OAuth2 and Password auth methods enabled. A possible attack scenario could be: 1. a malicious actor register...
June 15, 2024—KB5039239 (OS Build 26100.863)
None None...
nftables bug fix update
An update is available for nftables. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nftables provides a packet-filtering tool, with numerous improvements in...
Pixel Update Bulletin—May 2024Stay organized with collectionsSave and categorize content based on your preferences.
The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2024-05-05 or later address all issues in this bulletin and all issues in the May 2024 Android Security...
MGASA-2024-0216 Updated strongswan packages fix security vulnerability
Fixes CVE-2023-41913 buffer overflow and possible RCE, various IKEv2 improvements...
KB5039334: Servicing stack update for Windows 10, version 1607 and Server 2016: June 11, 2024
None None...
KB5039339: Servicing stack update for Windows Server 2008 R2 SP1: June 11, 2024
None None...
CVE-2024-27812
The issue was addressed with improvements to the file handling protocol. This issue is fixed in visionOS 1.2. Processing web content may lead to a denial-of-service...
CVE-2024-27812
A logic issue was addressed with improved file handling. This issue is fixed in visionOS 1.2. Processing web content may lead to a denial-of-service...
CVE-2024-27850
CVE-2024-27850 is specified as resolved by Apple with fixes in visionOS 1.2, macOS Sonoma 14.5, Safari 17.5, iOS 17.5 and iPadOS 17.5. The issue arises from a flaw in the noise injection algorithm that potentially allows a malicious webpage to fingerprint a user. The connected documents corrobora...
CVE-2024-27812
A logic issue was addressed with improved file handling. This issue is fixed in visionOS 1.2. Processing web content may lead to a denial-of-service...
CVE-2024-27812
A logic issue was addressed with improved file handling. This issue is fixed in visionOS 1.2. Processing web content may lead to a denial-of-service...
CVE-2024-27812
A logic issue in the WebKit component of the visionOS operating system, caused by uncontrolled resource consumption , allows a remote attacker to inject arbitrary 3D objects and cause a denial-of-service (DoS) . This vulnerability is triggered when processing web content. The issue was addressed ...
Virtuozzo Hybrid Infrastructure 5.4 Update 4 Hotfix 7 (5.4.4-152)
This update provides stability and performance improvements. Vulnerability id: VSTOR-80766, VSTOR-81600, VSTOR-85345 Improvements in certificate eligibility checks...
SUSE-SU-2024:1874-1 Security update for Java
This update for Java fixes thefollowing issues: apiguardian was updated to vesion 1.1.2: - Added LICENSE/NOTICE to the generated jar - Allow @API to be declared at the package level - Explain usage of Status.DEPRECATED - Include OSGi metadata in manifest assertj-core was implemented at version...
SUSE-SU-2024:1815-1 Security Beta update for SUSE Manager Client Tools
This update fixes the following issues: grafana: - Packaging improvements: Changed deprecated disabled service mode to manual Drop golang-packaging macros Drop explicit mod=vendor as it is enabled automatically - Update to version 9.5.18: SECURITY CVE-2024-1313: Require same organisation when...