CVE-2024-45624

Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved...

CVE-2024-45624

Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved...

CVE-2024-45624

CVE-2024-45624 affects pgpool-II, where the query cache can expose table data unauthorized to the querying user due to incompatible policies. Public sources in connected documents confirm the issue in pgpool-II and its impact of potential data exposure (CVE-2024-45624) with CVSS-inferred high imp...

CVE-2024-45624

Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved...

CVE-2024-45624

Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved...

CVE-2024-45624

Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved...

CVE-2024-45624

Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved...

bind security update

32:9.11.36-16.2 - Rebuild after CI change 32:9.11.36-16.1 - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 - Add ability to change runtime limits for max types and records per name 32:9.11.36-16 - Ensure incompatible dhcp is not accepted 32:9.11.36-15 - Ensure incompatible bind-dyndb-ldap is not...

[SECURITY] Fedora 40 Update: python2.7-2.7.18-43.fc40

Python 2 is an old version of the language that is incompatible with the 3.x line of releases. The language is mostly the same, but many details, especial ly how built-in objects like dictionaries and strings work, have changed considerably, and a lot of deprecated features have finally been...

Ubuntu: Security Advisory (USN-6913-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6934-1 mysql-8.0 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.39 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. In addition to security fixes, the updated packages contain bug fixes, new...

Ubuntu 16.04 LTS : phpCAS vulnerability (USN-6913-2)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6913-2 advisory. USN-6913-1 fixed CVE-2022-39369 for Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. This update provides the corresponding fix for Ubuntu 16.04 LTS. Tenable has extracted...

Ubuntu 20.04 LTS / 22.04 LTS : phpCAS vulnerability (USN-6913-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6913-1 advisory. Filip Hejsek discovered that phpCAS was using HTTP headers to determine the service URL used to validate tickets. A remote attacker could possibly use...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to access to resources using incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a created HTML page...

The vulnerability of the PDF.js library is related to access to resources through incompatible types, allowing attackers to execute arbitrary JavaScript code.

The vulnerability of the PDF.js library is related to access to resources through incompatible types. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code remotely...

USN-6823-1 mysql-8.0 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.37 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 23.10, and Ubuntu 24.04 LTS. In addition to security fixes, the updated packages contain bug...

CVE-2023-52665

Removed by vendor...

The vulnerability of the getBoundName() function in the JIT-compiler of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a malicious actor to execute arbitrary code.

The vulnerability of the getBoundName function in the JIT-compiler of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to access to resources through incompatible types during object processing. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to access to resources through incompatible types. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malicious HTML page...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to bypass the sandbox protection mechanisms and execute arbitrary code.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to access to resources through incompatible types. Exploiting this vulnerability allows a malicious actor to bypass the sandboxing mechanisms and execute arbitrary code...