Important: Red Hat Security Advisory: Service Telemetry Framework 1.5.4 security update

An update is now available for Service Telemetry Framework 1.5.4 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

CVE-2024-0218 DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1

A Denial of Service Dos vulnerability in Nozomi Networks Guardian, caused by improper input validation in certain fields used in the Radius parsing functionality of our IDS, allows an unauthenticated attacker sending specially crafted malformed network packets to cause the IDS module to stop...

CVE-2024-2243 Csmock: command injection vulnerability in csmock-plugin-snyk

A vulnerability was found in csmock where a regular user of the OSH service anyone with a valid Kerberos ticket can use the vulnerability to disclose the confidential Snyk authentication token and to run arbitrary commands on OSH workers...

CVE-2024-30708

CVE-2024-30708 is rejected/not used; the CNA withdrew it and there is no evidence of a vulnerability.

CVE-2024-29439

CVE-2024-29439 is rejected/not used per initial description.

CVE-2024-30718

CVE-2024-30718 entry is rejected/not used and does not represent an active vulnerability.

CVE-2024-30722

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2024-30702

CVE-2024-30702 entry is rejected; not an active vulnerability entry.

PT-2024-23584 · Unknown · Ros2 Dashing Diademata

Name of the Vulnerable Software and Affected Versions: ROS2 Dashing Diademata versions 2 Description: The issue allows remote attackers to escalate privileges and inject unauthorized nodes. Recommendations: For ROS2 Dashing Diademata version 2, at the moment, there is no information about a newer...

CVE-2024-30691

CVE-2024-30691 is rejected; this entry is not active and does not represent a vulnerability.

CVE-2024-30675

CVE-2024-30675 entry is rejected/not used and does not represent an active vulnerability entry.

PT-2024-23557 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Iron Irwini versions 2 Description: The issue allows remote attackers to gain control of multiple ROS2 nodes, potentially compromising system integrity, executing arbitrary commands, and disclosing sensitive information. Recommendations:...

PT-2024-23567 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Iron Irwini versions ROS VERSION 2 and ROS PYTHON VERSION 3 Description: An issue was discovered that allows remote attackers to execute arbitrary code via packages or nodes within the ROS2 system. Recommendations: For ROS2 Iron Irwini...

PT-2024-23593 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Dashing Diademata version 2 Description: An issue in ROS2 allows remote attackers to execute arbitrary code via packages or nodes. Recommendations: For ROS2 Dashing Diademata version 2, at the moment, there is no information about a newe...

Powerloom Announces Expansion to Base as It Surpasses 5200 Snapshotter Lite Nodes

By Uzair Amir In the last 30 days, Powerloom generated over 250 million snapshots unique data points, with a daily increase to approximately 10 million snapshots This is a post from HackRead.com Read the original post: Powerloom Announces Expansion to Base as It Surpasses 5200 Snapshotter Lite No...

PT-2024-8382

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a race condition in the read extent buffer pages function, which can lead to corrupted nodes and potentially allow an attacker to overwrite memory. The problem...

Moderate: Red Hat Bug Fix Advisory: fence-agents update

An update for fence-agents is now available for Red Hat Enterprise Linux 8. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster...

BIT-MEDIAWIKI-2020-10960

In MediaWiki before 1.34.1, users can add various Cascading Style Sheets CSS classes which can affect what content is shown or hidden in the user interface to arbitrary DOM nodes via HTML content within a MediaWiki page. This occurs because jquery.makeCollapsible allows applying an event handler ...

BIT-MYSQL-CLIENT-2020-15180

A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in wsrepsstmethod allows for command injection that can be exploited by a remote attacker to execute arbitrary commands on galera cluster nodes. This threatens the system's confidentiality, integrity, and...

BIT-MARIADB-2020-15180

A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in wsrepsstmethod allows for command injection that can be exploited by a remote attacker to execute arbitrary commands on galera cluster nodes. This threatens the system's confidentiality, integrity, and...