12015 matches found
SUSE-SU-2025:0043-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.46.5 bsc1234851: Security fixes: - CVE-2024-54479: Processing maliciously crafted web content may lead to an unexpected process crash - CVE-2024-54502: Processing maliciously crafted web content may lead to an unexpected...
Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management
Summary Multiple vulnerabilities were addressed in IBM Application Performance Management 8.1.4.0 IF17 patch Vulnerability Details CVEID:CVE-2024-22329 DESCRIPTION: IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.3 are vulnerable to...
[SECURITY] Fedora 40 Update: firefox-134.0-1.fc40
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
CVE-2025-22521: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Farrell wp Hosting Performance Check wp-hosting-performance-check allows Reflected XSS.This issue affects wp Hosting Performance Check: from n/a through = 2.18.8...
PT-2025-4514
Name of the Vulnerable Software and Affected Versions wp Hosting Performance Check versions n/a through 2.18.8 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Reflected XSS. Recommendations For ...
CVE-2024-56783
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsocket: remove WARNONONCE on maximum cgroup level cgroup maximum depth is INTMAX by default, there is a cgroup toggle to restrict this maximum depth to a more reasonable value not to harm performance. Remove...
UBUNTU-CVE-2024-56783
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsocket: remove WARNONONCE on maximum cgroup level cgroup maximum depth is INTMAX by default, there is a cgroup toggle to restrict this maximum depth to a more reasonable value not to harm performance. Remove...
CVE-2024-56783 netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsocket: remove WARNONONCE on maximum cgroup level cgroup maximum depth is INTMAX by default, there is a cgroup toggle to restrict this maximum depth to a more reasonable value not to harm performance. Remove...
CVE-2024-56783
CVE-2024-56783 : Linux kernel netfilter nft_socket vulnerability. Root cause: a WARN_ON_ONCE could be reached from userspace due to the default cgroup maximum depth being INT_MAX; a toggle exists to cap this depth to a safer value, and the code path unneededly warned instead of securely handling ...
Effective API Throttling for Enhanced API Security
APIs are the backbone of modern digital ecosystems, but their misuse can expose systems to cyber threats. Effective API throttling not only optimizes performance but also acts as a critical defense mechanism against abuse, such as denial-of-service attacks. Discover how this powerful strategy...
CVE-2024-54121
Startup control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...
CVE-2024-54121
Startup control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...
CVE-2024-54121
Startup control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...
CVE-2024-54121
CVE-2024-54121 is described across multiple sources as a startup control vulnerability in the Huawei HarmonyOS Ability module. The vulnerability affects the ability module, with exploitation potentially causing features to perform abnormally (impact described as abnormal functionality). The avail...
CVE-2024-56440
Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...
CVE-2024-56442
Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...
CVE-2024-56445
Instruction authentication bypass vulnerability in the Findnetwork module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...
CVE-2024-54120
Race condition vulnerability in the distributed notification module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...