RLSA-2024:1646 Important: grafana security and bug fix update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 Bug Fixes: TRIAGE CVE-2024-1394 grafana: golang-fips/openssl: Memory leaks i...

Finding the needle in the haystack: effortless SBOM search in your cloud with Wiz

Find out quickly where OS and open-source packages or libraries are deployed in your cloud environments and secure them before potential issues arise...

X.org Server 资源管理错误漏洞

X.org Server is an open source free software from the X.org Foundation. A resource management error vulnerability exists in X.org server that stems from a post-release reuse vulnerability in the ProcRenderAddGlyphs function...

CVE-2024-30264

Typebot is an open-source chatbot builder. A reflected cross-site scripting XSS in the sign-in page of typebot.io prior to version 2.24.0 may allow an attacker to hijack a user's account. The sign-in page takes the redirectPath parameter from the URL. If a user clicks on a link where the...

CVE-2024-30264 typebot.io: `GHSL-2024-040`

Typebot is an open-source chatbot builder. A reflected cross-site scripting XSS in the sign-in page of typebot.io prior to version 2.24.0 may allow an attacker to hijack a user's account. The sign-in page takes the redirectPath parameter from the URL. If a user clicks on a link where the...

Typebot 安全漏洞

Typebot is an open source chatbot builder by the individual developer Baptiste Arnaud. A security vulnerability exists in Typebot versions prior to 2.24.0, which stems from the presence of a Reflected Cross-Site Scripting XSS vulnerability...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a hang error...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a divide-by-zero error...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a reference count leak...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from an initialization error...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from the presence of memory corruption...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel. An attacker exploits the vulnerability to cause a program to crash...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the presence of out-of-bounds access...

X.org Server 安全漏洞

X.org Server is an open source free software from the X.org Foundation. A security vulnerability exists in X.org Server that originates from a buffer overflow vulnerability in the ProcXIGetSelectedEvents function...

The vulnerability of the virtuoso-opensource web application development platform, related to writing beyond the buffer limit, allows a hacker to trigger a service failure.

The vulnerability of the virtuoso-opensource web application development platform is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to trigger service failures using specially created SQL operators...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from the presence of a race condition...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the presence of an array overflow...

The vulnerability of the box_col_len() function in the virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the boxcollen function in the virtuoso-opensource web application development platform is related to insufficient processing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures after executing the SELECT operator...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an array overflow...

XZ Utils Backdoor

The cybersecurity world got really lucky last week. An intentionally placed backdoor in XZ Utils, an open-source compression utility, was pretty much accidentally discovered by a Microsoft engineer--weeks before it would have been incorporated into both Debian and Red Hat Linux. From ArsTehnica:...