Linux Distros Unpatched Vulnerability : CVE-2021-47415

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iwlwifi: mvm: Fix possible NULL dereference In iwlmvmremovetimeevent check that 'tedata-vif'...

Linux Distros Unpatched Vulnerability : CVE-2023-52488

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: convert from raw to noinc regmap functions for FIFO The SC16IS7XX IC...

PT-2025-1575 · Google · Gvisor

Name of the Vulnerable Software and Affected Versions: gVisor affected versions not specified Description: A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identifier that could aid in trackin...

BELL-CVE-2024-53218

Bulletin has no description...

CVE-2024-52759

D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ippositionasp function...

CVE-2024-50296

creationtimestamp| type| source ---|---|--- 2024-11-19 03:39:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113507538148924735 2024-11-19 04:16:04+00:00| seen| https://t.me/cvedetector/11423 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-...

BELL-CVE-2024-49894

Bulletin has no description...

CVE-2024-8803 Bulk NoIndex & NoFollow Toolkit <= 2.15 - Reflected Cross-Site Scripting

The Bulk NoIndex & NoFollow Toolkit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.15. This makes it possible for unauthenticated attackers to inject arbitrary we...

CVE-2024-23322 Envoy crashes when idle and request per try timeout occur within the backoff interval

Envoy is a high-performance edge/middle/service proxy. Envoy will crash when certain timeouts happen within the same interval. The crash occurs when the following are true: 1. hedgeonpertrytimeout is enabled, 2. pertryidletimeout is enabled it can only be done in configuration, 3. per-try-timeout...

PT-2024-13305 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A previously reported issue was withdrawn by its CNA after further investigation showed it was not a security issue. Recommendations: At the moment, there is no information...

RHSA-2024:0096

creationtimestamp| type| source ---|---|--- 2024-01-09 17:17:25+00:00| seen| https://t.me/ctinow/165139 2024-11-14 14:55:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113481884933073861...

PT-2023-36290 · Suse · Container-Suseconnect

Name of the Vulnerable Software and Affected Versions: container-suseconnect affected versions not specified Description: The issue is related to a security release in the go 1.21 package. The container-suseconnect package has been rebuilt with this security release to address the issue. There is...

PT-2023-26348 · Linux Mint +2 · Linuxmint +2

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue is not considered a security issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this issue...

ROS-2-1701

2.1701 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...

PT-2023-36212 · Hashicorp · Terraform-Provider-Helm

Name of the Vulnerable Software and Affected Versions: terraform-provider-helm affected versions not specified Description: The issue is related to a security release in the Go programming language, version 1.20. The terraform-provider-helm package has been rebuilt to incorporate this security...

Important: perl

Issue Overview: HTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates. CVE-2023-31486 Affected Packages: perl Issue Correction: Run dnf update perl --releasever 2023.1.20230628 o...

PT-2021-16752 · Apport +2 · Apport +2

Name of the Vulnerable Software and Affected Versions: apport affected versions not specified Description: The issue concerns the get pid info function in the data/apport component, which fails to properly parse the /proc/pid/status file from the kernel. This parsing issue may lead to potential...

Issue Security Scheme Changes Are Not Reported In Audit Log

panel:bgColor=e7f4fa NOTE: This bug report is for JIRA Server. Using JIRA Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/JRACLOUD-62187. panel h3. Summary When a change is made to an issue security scheme, nothing is logged in the Audit Log. This means that an...

When JIRA project has a security scheme, the option "None" is not displayed in Crucible

h3. Summary Whenever a JIRA project has a Security Scheme defined, and a workflow transition has at least one required field, a window is opened in JIRA side so that the required field/s are selected. Among the fields displayed in this window there will be the "Security Level", in which the...

The color of the issue security field should be configureable or black

The color of the issue secuity field is red. Why? The color should be configureable or black, like other fields. I have already asked a question. Apparently no one knows or it is not possible. https://answers.atlassian.com/questions/222397/howto-change-color-of-issue-security-field...