Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: CVE-2024-44308: Fixed processing maliciously crafted web content that may lead to arbitrary code execution bsc1233631 CVE-2024-44309: Fixed data isolation bypass vulnerability bsc1233632 Patch Instructions: To install this SUSE update use th...

SUSE-SU-2024:4293-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: - CVE-2024-44308: Fixed processing maliciously crafted web content that may lead to arbitrary code execution bsc1233631 - CVE-2024-44309: Fixed data isolation bypass vulnerability bsc1233632...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: CVE-2024-44308: Fixed processing maliciously crafted web content that may lead to arbitrary code execution bsc1233631 CVE-2024-44309: Fixed data isolation bypass vulnerability bsc1233632 Patch Instructions: To install this SUSE update use th...

SUSE-SU-2024:4292-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: - CVE-2024-44308: Fixed processing maliciously crafted web content that may lead to arbitrary code execution bsc1233631 - CVE-2024-44309: Fixed data isolation bypass vulnerability bsc1233632...

CVE-2024-53866

The package manager pnpm prior to version 9.15.0 seems to mishandle overrides and global cache: Overrides from one workspace leak into npm metadata saved in global cache; npm metadata from global cache affects other workspaces; and installs by default don't revalidate the data including on first...

Schneider Electric Modicon

GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...

PT-2024-35964

Name of the Vulnerable Software and Affected Versions: pnpm versions prior to 9.15.0 Description: The package manager pnpm seems to mishandle overrides and global cache. This can lead to overrides from one workspace leaking into npm metadata saved in the global cache, affecting other workspaces...

Schneider Electric Harmony HMI and Pro-Face HMI Products

GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...

Schneider Electric PowerChute Serial Shutdown

GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...

The vulnerability of the Moby container isolation system creation software, related to competitive access to resources, allows a intruder to trigger a service failure.

The vulnerability of the Moby container isolation system creation software is related to competitive access to resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.46.3 bsc1232747, including fixes for: CVE-2024-44308: Fixed arbitrary code execution by not allocating DFG register after a slow path bsc1233631. CVE-2024-44309: Fixed a data isolation bypass vulnerability bsc1233632...

SUSE-SU-2024:4167-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.46.3 bsc1232747, including fixes for: - CVE-2024-44308: Fixed arbitrary code execution by not allocating DFG register after a slow path bsc1233631. - CVE-2024-44309: Fixed a data isolation bypass vulnerability bsc1233632....

SUSE-SU-2024:4117-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.46.3 bsc1232747, including fixes for: - CVE-2024-44308: Fixed arbitrary code execution by not allocating DFG register after a slow path bsc1233631. - CVE-2024-44309: Fixed a data isolation bypass vulnerability bsc1233632....

AlmaLinux 8 : webkit2gtk3 (ALSA-2024:10481)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:10481 advisory. webkitgtk: data isolation bypass vulnerability CVE-2024-44309 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory...

AlmaLinux 9 : webkit2gtk3 (ALSA-2024:10472)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:10472 advisory. webkitgtk: data isolation bypass vulnerability CVE-2024-44309 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory...

The vulnerability of the caching mechanism for microprogramming software on Intel processors allows attackers to enhance their privileges.

The vulnerability of the caching mechanism for microprogramming software on Intel processors is related to improper isolation of common resources between trusted and untrusted agents. Exploiting this vulnerability can allow attackers to enhance their privileges...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.46.3 bsc1232747, including fixes for: CVE-2024-44308: Fixed arbitrary code execution by not allocating DFG register after a slow path bsc1233631. CVE-2024-44309: Fixed a data isolation bypass vulnerability bsc1233632...

PT-2024-33484 · Sandboxie · Sandboxie

Name of the Vulnerable Software and Affected Versions: Sandboxie affected versions not specified Description: Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. An authenticated user UserA without privileges can read files created in a sandbo...

Provisioning Services with multiple non routable streaming networks

Using Provisioning Services with multiple non routable streaming networks may result in target devices failing to fully boot.A simple example is described below, how customers may have multiple PVS servers added to each network. Example single PVS server farm, the PVS server has three network...

webkitgtk: data isolation bypass vulnerability

A data isolation bypass vulnerability was discovered in WebKitGTK. Processing maliciously crafted web content could enable a cross-site scripting XSS attack...