CVE-2024-24786 affecting package kubernetes for versions less than 1.28.4-12

CVE-2024-24786 affecting package kubernetes for versions less than 1.28.4-12. A patched version of the package is available...

WordPress W3P SEO plugin < 1.8.6 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin W3P SEO versions 1.8.6...

Huawei EulerOS: Security Advisory for less (EulerOS-SA-2024-2670)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for less (EulerOS-SA-2024-2636)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-21173 affecting package mysql for versions less than 8.0.40-1

CVE-2024-21173 affecting package mysql for versions less than 8.0.40-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-21159 affecting package mysql for versions less than 8.0.40-1

CVE-2024-21159 affecting package mysql for versions less than 8.0.40-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1941 affecting package mysql for versions less than 8.0.40-1

CVE-2022-1941 affecting package mysql for versions less than 8.0.40-1. An upgraded version of the package is available that resolves this issue...

K000148248: less vulnerability CVE-2024-32487

Security Advisory Description less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive...

AZL-51693 CVE-2024-10041 affecting package pam for versions less than 1.5.1-7

A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input stdin. As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This fla...

CVE-2024-21165 affecting package mysql for versions less than 8.0.40-1

CVE-2024-21165 affecting package mysql for versions less than 8.0.40-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-21203 affecting package mysql for versions less than 8.0.40-1

CVE-2024-21203 affecting package mysql for versions less than 8.0.40-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-21159 affecting package mysql for versions less than 8.0.40-1

CVE-2024-21159 affecting package mysql for versions less than 8.0.40-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-21196 affecting package mysql for versions less than 8.0.40-1

CVE-2024-21196 affecting package mysql for versions less than 8.0.40-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-20996 affecting package mysql for versions less than 8.0.40-1

CVE-2024-20996 affecting package mysql for versions less than 8.0.40-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-21236 affecting package mysql for versions less than 8.0.40-1

CVE-2024-21236 affecting package mysql for versions less than 8.0.40-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-21237 affecting package mysql for versions less than 8.0.40-1

CVE-2024-21237 affecting package mysql for versions less than 8.0.40-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-48788 affecting package kernel for versions less than 5.15.32.1-3

CVE-2022-48788 affecting package kernel for versions less than 5.15.32.1-3. A patched version of the package is available...

AZL-51443 CVE-2024-50029 affecting package kernel for versions less than 6.6.57.1-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: Fix UAF in hcienhancedsetupsync This checks if the ACL connection remains valid as it could be destroyed while hcienhancedsetupsync is pending on cmdsync leading to the following trace: BUG: KASAN:...

AZL-52341 CVE-2024-50010 affecting package kernel for versions less than 6.6.64.2-9

In the Linux kernel, the following vulnerability has been resolved: exec: don't WARN for racy pathnoexec check Both imode and noexec checks wrapped in WARNON stem from an artifact of the previous implementation. They used to legitimately check for the condition, but that got moved up in two...

AZL-51405 CVE-2024-49868 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion BUG Syzbot reported a NULL pointer dereference with the following crash: FAULTINJECTION: forcing a failure. starttransaction+0x830/0x1670...