Malicious code in Pathoschild.Stardew.Mod.BuildConfig (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Pathoschild.Stardew.Mod.Build.Config (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Debian dsa-5717 : libapache2-mod-php8.2 - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5717 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5717-1 [email protected] https://www.debian.org/security/ Moritz...

CVE-2024-6084

A vulnerability has been found in itsourcecode Pool of Bethesda Online Reservation System up to 1.0 and classified as critical. Affected by this vulnerability is the function uploadImage of the file /admin/modroom/controller.php?action=add. The manipulation of the argument image leads to...

Debian dla-3833 : libapache2-mod-php7.3 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3833 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3833-1 [email protected]...

OPENSUSE-SU-2024:13346-1 apache2-mod_uwsgi-2.0.22-1.1 on GA media

These are all security issues fixed in the apache2-moduwsgi-2.0.22-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10627-1 apache2-mod_apparmor-3.0.3-3.2 on GA media

These are all security issues fixed in the apache2-modapparmor-3.0.3-3.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10260-1 apache2-mod_mono-3.12-1.7 on GA media

These are all security issues fixed in the apache2-modmono-3.12-1.7 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10034-1 apache2-mod_security2-2.9.0-5.6 on GA media

These are all security issues fixed in the apache2-modsecurity2-2.9.0-5.6 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12971-1 apache2-mod_apparmor-3.1.4-1.1 on GA media

These are all security issues fixed in the apache2-modapparmor-3.1.4-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2024-36761

naga v0.14.0 was discovered to contain a stack overflow via the component /wgsl/parse/mod.rs...

Ubuntu: Security Advisory (USN-6826-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2022-23527

modauthopenidc is an OpenID Certifiedtm authentication and authorization module for the Apache 2.x HTTP server. Versions prior to 2.4.12.2 are vulnerable to Open Redirect. When providing a logout parameter to the redirect URI, the existing code in oidcvalidateredirecturl does not properly check f...

SUSE CVE-2024-24814

modauthopenidc is an OpenID Certifiedtm authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In affected versions missing input validation on modauthopenidcsessionchunks cookie value makes the server vulnerable to a...

python39:3.9 and python39-devel:3.9 security update

modwsgi numpy python39 3.9.19-1 - Update to 3.9.19 - Security fixes for CVE-2023-6597 and CVE-2024-0450 - Fix tests for XMLPullParser with Expat with fixed CVE Resolves: RHEL-33676, RHEL-33688 python3x-pip python3x-setuptools python3x-six python-cffi python-chardet python-cryptography python-idna...

Debian: Security Advisory (DLA-3818-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

httpd: mod_macro: out-of-bounds read vulnerability

A flaw was found in the modmacro module of httpd. When processing a very long macro, the null byte terminator will not be added, leading to an out-of-bounds read, resulting in a crash...

GHSA-F6MM-5FC7-3G3C goreleaser shows environment by default

Summary Since 4787 the log output is printed on the INFO level, while previously it was logged on DEBUG. This means if the go build output is non-empty, goreleaser leaks the environment. PoC Create a Go project with dependencies, do not pull them yet or run goreleaser later in a container, or...

RHEL 7 : mod_security (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - modsecurity: incorrect parsing of HTTP multipart requests leads to web application firewall bypass CVE-2022-48279...

Debian dla-3810 : libapache2-mod-php7.3 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3810 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3810-1 [email protected]...