CVE-2024-5072

Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.11.0 and earlier allows an authenticated user with access to the PAM JIT elevation feature to manipulate the LDAP filter query via a specially crafted request...

CVE-2024-5072

Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.11.0 and earlier allows an authenticated user with access to the PAM JIT elevation feature to manipulate the LDAP filter query via a specially crafted request...

CVE-2024-5072

Devolutions Server versions 2024.1.11.0 and earlier are affected by a security vulnerability involving improper input validation within the PAM JIT elevation feature. An authenticated user with access to this feature can manipulate LDAP filter queries by sending a specially crafted request. While...

CVE-2024-5072: Undefined Security Weakness

Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.11.0 and earlier allows an authenticated user with access to the PAM JIT elevation feature to manipulate the LDAP filter query via a specially crafted request...

PT-2024-34401

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions 2024.1.11.0 and earlier Description: The issue is related to improper input validation in the PAM JIT elevation feature, which allows an authenticated user to manipulate the LDAP filter query via a specially crafte...

The vulnerability of the JIT-compiler of the Mozilla Firefox browser, which allows a hacker to trigger a service failure.

The vulnerability of the JIT-compiler of the Mozilla Firefox browser is related to an uncontrolled resource consumption due to incorrect object initialization. Exploiting this vulnerability can allow a malicious actor to cause service failures...

RHEL 7 : firefox (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - firefox: Possible integer overflow to fix inside XMLParse in Expat CVE-2016-9063 - firefox: arbitrary cod...

[SECURITY] Fedora 38 Update: pypy-7.3.15-3.fc38

PyPy's implementation of Python, featuring a Just-In-Time compiler on some CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc This build of PyPy has JIT-compilation enabled...

[SECURITY] Fedora 39 Update: pypy-7.3.15-3.fc39

PyPy's implementation of Python, featuring a Just-In-Time compiler on some CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc This build of PyPy has JIT-compilation enabled...

[SECURITY] Fedora 40 Update: pypy-7.3.15-3.fc40

PyPy's implementation of Python, featuring a Just-In-Time compiler on some CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc This build of PyPy has JIT-compilation enabled...

CentOS 8 : thunderbird (CESA-2024:1939)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2024:1939 advisory. - The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites. This...

USN-6747-2 firefox regressions

USN-6747-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potential...

SUSE CVE-2024-3855

In certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. This vulnerability affects Firefox 125...

Amazon Linux 2 : firefox (ALASFIREFOX-2024-024)

The version of firefox installed on the remote host is prior to 115.10.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2024-024 advisory. An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript...

pcre2:pcre2_fuzzer_16_4l: Use-of-uninitialized-value in do_callout_jit

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed Report: https://oss-fuzz.com/testcase?key=6165376946733056 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer164l Job Type: libfuzzermsanpcre2 Platform Id: linux Crash Type:...

PT-2024-40709

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of Use-of-uninitialized-value. The crash state involves several functions: fast forward first n chars, jit compile,...

PT-2024-40714 · Git +1 · Pcre2

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to a crash type of Use-of-uninitialized-value. The crash state includes do callout jit and jit machine stack exec functions. Recommendations: At the moment, there i...

Fedora 40 : firefox (2024-c6a1d4e0ec)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c6a1d4e0ec advisory. - New upstream release 125.0 ---- - New upstream release 124.0.2 Tenable has extracted the preceding description block directly from the Fedora...

CentOS 8 : firefox (CESA-2024:1912)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2024:1912 advisory. - The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites. This...

RHEL 7 : firefox (RHSA-2024:1486)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1486 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...