423 matches found
binutils -- Multiple vulnerabilities
[email protected] reports PR/281070: A new version of devel/binutils has been released fixing CVE-2023-1972, CVE-2023-25585, CVE-2023-25586, and CVE-2023-25588...
SUSE SLES15: kubevirt-container-disk / kubevirt-manifests / kubevirt-tests / etc (SUSE-SU-2024:2669-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2669-1 advisory. - Update to version 1.2.2 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.2 Release notes...
SUSE-SU-2024:2639-1 Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container
This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues: - Updat...
CVE-2024-41703
LibreChat through 0.7.4-rc1 has incorrect access control for message updates...
CVE-2024-41703
LibreChat up to version 0.7.4-rc1 has an incorrect access control for message updates. The issue is documented across multiple sources (NVD, Red Hat, OSV, CVE lists) with the same description. The CVSS-based impact is listed as critical in NVD (high confidentiality, integrity, and availability im...
CVE-2024-41704
LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images...
CVE-2024-41704
Technical details about CVE-2024-41704 are not provided in the connected documents; monitor for updates.
CVE-2024-41704
LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images...
CVE-2024-41703
LibreChat through 0.7.4-rc1 has incorrect access control for message updates...
SUSE SLES15: kubevirt-container-disk / kubevirt-manifests / kubevirt-tests / etc (SUSE-SU-2024:2246-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2246-1 advisory. - Collect component Role rules under operator Role instead of ClusterRole bsc1223965, CVE-2024-33394 - Ensure procps is...
MAL-2024-2957 Malicious code in remove-pr-labels (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in remove-pr-labels (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-36108 Multiple Broken Function-Level Authorization vulnerabilities in casgate
casgate is an Open Source Identity and Access Management system. In affected versions casgate allows remote unauthenticated attacker to obtain sensitive information via GET request to an API endpoint. This issue has been addressed in PR 201 which is pending merge. An attacker could use id paramet...
SUSE CVE-2021-47252
In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid WARNON timing related checks The soft/batadv interface for a queued OGM can be changed during the time the OGM was queued for transmission and when the OGM is actually transmitted by the worker. But WARNON must ...
GHSA-3RCQ-39XP-7XJP ic-stable-structures vulnerable to BTreeMap memory leak when deallocating nodes with overflows
Impact When storing unbounded types in a BTreeMap, a node is represented as a linked list of "memory chunks". It was discovered recently that when we deallocate a node, in some cases only the first memory chunk is deallocated, and the rest of the memory chunks remain incorrectly allocated, causin...
ic-stable-structures vulnerable to BTreeMap memory leak when deallocating nodes with overflows
Impact When storing unbounded types in a BTreeMap, a node is represented as a linked list of "memory chunks". It was discovered recently that when we deallocate a node, in some cases only the first memory chunk is deallocated, and the rest of the memory chunks remain incorrectly allocated, causin...
gcc-toolset-12-gcc bug fix update
An update is available for gcc-toolset-12-gcc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gcc-toolset-12-gcc package contains the GNU Compiler Collectio...
xml-crypto vulnerable to XML signature verification bypass due improper verification of signature/signature spoofing
Summary Default configuration does not check authorization of the signer, it only checks the validity of the signature per section 3.2.2 of https://www.w3.org/TR/2008/REC-xmldsig-core-20080610/sec-CoreValidation. As such, without additional validation steps, the default configuration allows a...
SUSE SLES15: kubevirt-container-disk / kubevirt-manifests / kubevirt-tests / etc (SUSE-SU-2024:1311-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1311-1 advisory. - Improve the OrdinalPodInterfaceName mechanism bsc1222699 Also containers were rebuilt against the current released updates...
