CVE-2024-12939

A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as critical. This issue affects the function addedu of the file /parse/alledits.php. The manipulation of the argument degree leads to sql injection. The attack may be initiated remotely. The exploit has been disclos...

CVE-2024-12899 1000 Projects Attendance Tracking Management System course_action.php sql injection

A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/courseaction.php. The manipulation of the argument coursecode leads to sql injection. The attack may be initiated...

resource-agents bug fix and enhancement update

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The resource-agents packages provide the Pacemaker and RGManager...

autofs bug fix update

An update is available for autofs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The autofs utility controls the operation of the automount daemon. The daemon...

sssd bug fix update

An update is available for sssd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The System Security Services Daemon SSSD service provides a set of daemons to...

docker-27.4.1_ce-12.1 on GA media (moderate)

docker-27.4.1ce-12.1 on GA media Announcement ID: openSUSE-SU-2024:14597-1 Rating: moderate Cross-References: CVE-2024-29018 CVSS scores: CVE-2024-29018 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2024-29018 SUSE : 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:...

traefik2-2.11.16-1.1 on GA media (moderate)

traefik2-2.11.16-1.1 on GA media Announcement ID: openSUSE-SU-2024:14595-1 Rating: moderate Cross-References: CVE-2024-45337 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now b...

git-bug-0.8.0+git.1733745604.d499b6e-1.1 on GA media (moderate)

git-bug-0.8.0+git.1733745604.d499b6e-1.1 on GA media Announcement ID: openSUSE-SU-2024:14592-1 Rating: moderate Cross-References: CVE-2024-45337 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one...

libmozjs-78-0-78.15.0-7.1 on GA media (moderate)

libmozjs-78-0-78.15.0-7.1 on GA media Announcement ID: openSUSE-SU-2024:14589-1 Rating: moderate Cross-References: CVE-2024-50602 CVSS scores: CVE-2024-50602 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2024-50602 SUSE : 5.6...

traefik-3.2.3-1.1 on GA media (moderate)

traefik-3.2.3-1.1 on GA media Announcement ID: openSUSE-SU-2024:14590-1 Rating: moderate Cross-References: CVE-2024-45337 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

cloudflared-2024.12.1-1.1 on GA media (moderate)

cloudflared-2024.12.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14585-1 Rating: moderate Cross-References: CVE-2024-45337 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...

python312-3.12.8-1.1 on GA media (moderate)

python312-3.12.8-1.1 on GA media Announcement ID: openSUSE-SU-2024:14581-1 Rating: moderate Cross-References: CVE-2024-12254 CVSS scores: CVE-2024-12254 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2024-12254 SUSE : 8.7...

gstreamer-1.24.10-2.1 on GA media (moderate)

gstreamer-1.24.10-2.1 on GA media Announcement ID: openSUSE-SU-2024:14576-1 Rating: moderate Cross-References: CVE-2024-47606 CVSS scores: CVE-2024-47606 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now ...

CVE-2023-39305

Missing Authorization vulnerability in Dash Labs Yet Another Stars Rating yet-another-stars-rating allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yet Another Stars Rating: from n/a through = 3.4.3...

CVE-2023-39305

Missing Authorization vulnerability in Dash Labs Yet Another Stars Rating yet-another-stars-rating allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yet Another Stars Rating: from n/a through = 3.4.3...

CVE-2023-39305 WordPress Yet Another Stars Rating plugin <= 3.4.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Dash Labs Yet Another Stars Rating yet-another-stars-rating allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yet Another Stars Rating: from n/a through = 3.4.3...

CBL Mariner 2.0 Security Update: mariadb (CVE-2023-6937)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6937 advisory. - wolfSSL prior to 5.6.6 did not check that messages in one DTLS record do not span key boundaries. As a resul...

govulncheck-vulndb-0.0.20241209T183251-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20241209T183251-1.1 on GA media Announcement ID: openSUSE-SU-2024:14567-1 Rating: moderate Cross-References: CVE-2024-10220 CVE-2024-36620 CVE-2024-36621 CVE-2024-36623 CVE-2024-37820 CVE-2024-43784 CVE-2024-45719 CVE-2024-50948 CVE-2024-52003 CVE-2024-52529 CVE-2024-52801...

Bykea: Lack of Feedback Validation Permits Arbitrary Driver Ratings

The vulnerability discovered by @bugbountywithmarco in Bykea's feedback system allowed authenticated passengers to submit feedback for drivers they had not actually ridden with. The exploit was limited to trips the attacker legitimately owned, and each trip could only affect one driver rating at ...

squid-6.12-1.1 on GA media (moderate)

squid-6.12-1.1 on GA media Announcement ID: openSUSE-SU-2024:14566-1 Rating: moderate Cross-References: CVE-2024-45802 CVSS scores: CVE-2024-45802 SUSE : 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H CVE-2024-45802 SUSE : 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H...