RLSA-2024:6681 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: 115.15/128.2 ESR mozilla: Type confusion when looking up a property name in a "with" block CVE-2024-8381 mozilla: Internal event interfaces were exposed to web...

Unspecified vulnerability in Linux kernel (CNVD-2024-40288)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from allowing out-of-bounds writes. No details of the vulnerability are provided at this time...

Scout 安全漏洞

Scout is an open source platform from Clinical Genomics for analyzing VCFs and being able to aid collaborations to solve rare diseases faster. A security vulnerability exists in Scout versions prior to 4.89 that stems from a lack of filename cleanup and can bypass expected file extensions and all...

Malicious code in dx-hotels-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 757cbf55b30ccb4cbbf7c26afbc8eb1493280155f0ae8578700044d07a611f5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Unspecified vulnerability in Linux kernel (CNVD-2024-40291)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not checking if debug traps are enabled. No details of the vulnerability are provided at this time...

Unspecified vulnerability in Linux kernel (CNVD-2024-40280)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a security vulnerability that stems from a missing required null entry. No details of the vulnerability are provided at this time...

Unspecified vulnerability in Linux kernel (CNVD-2024-40279)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly handle timers when handling timer interrupts. No details of the vulnerability are...

Mattermost Resource-Consuming Vulnerability

Mattermost is an open source, self-hosted, enterprise-class chat platform that provides secure team communication and collaboration capabilities. A resource-consuming vulnerability exists in Mattermost. An attacker could exploit this vulnerability to cause a service down or denial of service...

Unspecified vulnerability in Linux kernel (CNVD-2024-40281)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from the presence of a deadlock problem. No details of the vulnerability are provided at this time...

Unspecified vulnerability in Linux kernel (CNVD-2024-40294)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a security vulnerability that stems from a null pointer dereference. No details of the vulnerability are provided at this time...

Unspecified vulnerability in Linux kernel (CNVD-2024-40293)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not checking whether the denominator is zero. No details of the vulnerability are provided at this time...

Mattermost Unauthorized Access Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an unauthorized access vulnerability that stems from a failure to restrict access to channel files that are not linked to a post. An attacker could exploit the vulnerability to...

Unspecified vulnerability in Linux kernel (CNVD-2024-40271)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to null-check pointers. No details of the vulnerability are provided at this time...

Unspecified vulnerability in Linux kernel (CNVD-2024-40274)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not checking the validity of an index before accessing the bwparams array. No details of the vulnerability a...

Unspecified vulnerability in Linux kernel (CNVD-2024-40290)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not checking if debug traps are enabled. No details of the vulnerability are provided at this time...

Unspecified vulnerability in Linux kernel (CNVD-2024-40273)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from failing to ensure that the connector is fully initialized before sending an HPD event. No details of the...

CVE-2024-47070 authentik vulnerable to password authentication bypass via X-Forwarded-For HTTP header

authentik is an open-source identity provider. A vulnerability that exists in versions prior to 2024.8.3 and 2024.6.5 allows bypassing password login by adding X-Forwarded-For header with an unparsable IP address, e.g. a. This results in a possibility of logging into any account with a known logi...

RPShare 安全漏洞

RPShare is a client-side Fabric mod and server-side Paper plugin open-sourced by Plasmo. It allows players to quickly share resource packs. A security vulnerability exists in RPShare version v.1.0.0, which stems from the presence of a directory traversal vulnerability that allows remote attackers...

freeimage 安全漏洞

FreeImage is FreeImage open source a cross-platform for supporting popular graphic image formats open source library . freeimage has a buffer overflow vulnerability , the vulnerability stems from the size of the configuration file is not cleaned up , an attacker can use this vulnerability to caus...

authentik 安全漏洞

authentik is an open source identity provisioning application from authentik Open Source. A security vulnerability exists in authentik that stems from the fact that users can steal their legitimately obtained access tokens and use them to access other applications that they are not authorized to...