RHEL 8 : webkit2gtk3 (RHSA-2024:10481)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10481 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: data isolation bypass...

ALSA-2024:10472 Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: data isolation bypass vulnerability CVE-2024-44309 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refe...

ALSA-2024:10481 Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: data isolation bypass vulnerability CVE-2024-44309 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refe...

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: data isolation bypass vulnerability CVE-2024-44309 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refe...

RHEL 9 : webkit2gtk3 (RHSA-2024:10482)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10482 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: data isolation bypass vulnerabilit...

RHEL 8 : webkit2gtk3 (RHSA-2024:10501)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10501 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: data isolation bypass vulnerabilit...

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: data isolation bypass vulnerability CVE-2024-44309 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refe...

CVE-2024-53844 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in labsai/eddi

E.D.D.I Enhanced Dialog Driven Interface is a middleware to connect and manage LLM API bots. A path traversal vulnerability exists in the backup export functionality of EDDI, as implemented in RestExportService.java. This vulnerability allows an attacker to access sensitive files on the server by...

PT-2024-35947 · Eddi · Eddi

Name of the Vulnerable Software and Affected Versions: EDDI Enhanced Dialog Driven Interface versions prior to 5.4 Description: A path traversal vulnerability exists in the backup export functionality of EDDI, as implemented in RestExportService.java. This vulnerability allows an attacker to acce...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Extensions in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to bypass site isolation through a crafted Chrome Extension. Chromium security severity: High...

CVE-2024-44309

A data isolation bypass vulnerability was discovered in WebKitGTK. Processing maliciously crafted web content could enable a cross-site scripting XSS attack. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...

Exploit for Unchecked Error Condition in Apache Tomcat

🚨🚨CVE-2024-52316🚨🚨 🚨🚨CVE-2024-52316 - Apache Tomcat Authenticat...

Access Token Leakage

Duende.AccessTokenManagement.OpenIdConnect is vulnerable to access token leakage. The vulnerability is due to improper token isolation within the HTTP client pool, where a refreshed access token is not properly isolated and may be captured by pooled HttpClient instances, allowing an attacker to...

Apache Tomcat 安全漏洞

Apache Tomcat is a lightweight Web application server from the American Apache Apache Foundation. The program implements support for Servlets and JavaServer Page JSP. A security vulnerability exists in Apache Tomcat that stems from an incorrect object recovery and reuse vulnerability that could...

Important: thunderbird

Issue Overview: A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox 131, Firefox ESR 128.3, Firefox ESR 115.16, Thunderbird 128.3, and Thunderbird 131. CVE-2024-9392 An attacker could, via a specially crafted...

The vulnerability of Siemens SCALANCE and RUGGEDCOM industrial router web servers allows attackers to enhance their privileges.

The vulnerability of Siemens SCALANCE and RUGGEDCOM industrial router web servers lies in the inadequate isolation between user sessions. Exploiting this vulnerability can allow attackers to enhance their privileges...

SUSE CVE-2024-11110

Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. Chromium security severity: High...

CVE-2024-11110

Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. Chromium security severity: High...

DEBIAN-CVE-2024-11110

Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. Chromium security severity: High...

CVE-2024-11110

Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. Chromium security severity: High...