org.apache.cxf.systests:cxf-systests-databinding (2.3.10), org.apache.cxf.systests:cxf-systests-jaxrs (2.3.10) +8 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.3.10)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf.systests:cxf-systests-databinding 2.3.10 -...

org.apache.cxf.systests:cxf-systests-databinding (2.4.1), org.apache.cxf.systests:cxf-systests-jaxrs (2.4.1) +9 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.4.1)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf.systests:cxf-systests-databinding 2.4.1 -...

org.apache.cxf.systests:cxf-systests-databinding (2.3.11), org.apache.cxf.systests:cxf-systests-jaxrs (2.3.11) +8 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.3.11)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.3.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf.systests:cxf-systests-databinding 2.3.11 -...

org.apache.cxf.systests:cxf-systests-databinding (2.7.14), org.apache.cxf.systests:cxf-systests-jaxrs (2.7.14) +9 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.7.14)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.7.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf.systests:cxf-systests-databinding 2.7.14 -...

io.github.project-openubl:quarkus-xsender-deployment (>=5.0.0.cr1, <=5.1.1), io.quarkiverse.cxf:quarkus-cxf-deployment (>=2.0.0, <=3.8.0) +32 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (>=4.0.0, <=4.0.3)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version =4.0.0, =5.0.0.cr1, =2.0.0, =2.7.0.cr1, =2.0.0, =2.2.0, =2.2.1, =2.0.0, =2.0.0, =2.0.0, =3.0.0-m2, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.3 and more Source cves: CVE-2024-28752 Source advisory: ME...

org.apache.cxf.systests:cxf-systests-databinding (>=3.6.0, <=3.6.2), org.apache.cxf.systests:cxf-systests-jaxrs (>=3.6.0, <=3.6.2) +10 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (>=3.6.0, <=3.6.2)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version =3.6.0, =3.6.0, =3.6.0, =3.6.0, =3.6.0, =3.6.0, =3.6.0, =3.6.0, =3.6.0, =3.6.0, =3.6.0, =3.6.0, =3.6.0, =3.6.2 Source cves: CVE-2024-28752 Source advisory: MEND:CVE-2024-28752...

be.selckin.util:cxf-php-soap-codegen (0.1), com.custardsource.parfait:parfait-cxf (>=0.2.0, <=0.3.10) +144 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (>=2.0.6, <=3.5.7)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version =2.0.6, =0.2.0, =2.2.1, =1.0.3, =1.0.3, =1.0.3, =0.9-milestone1, =0.1-milestone, =0.1-milestone, =0.9-milestone1, =0.1-milestone, =0.1-milestone, =0.9-milestone1, =0.9-milestone3, =0.9-milestone6.6 and more Source cves: CVE-2024-28752 Source...

Moderate: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. 'Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

RHEL 9 : kernel-rt (RHSA-2024:1303)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1303 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Securi...

PT-2024-8410

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the qbman component of the Linux kernel, where the smp call function always runs its callback in hard IRQ context, even on PREEMPT RT, where spinlocks can sleep...

RHEL 9 : kernel-rt (RHSA-2024:1306)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1306 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.2 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 8 : kernel-rt (RHSA-2024:1269)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1269 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

D-Link GO-RT-AC750 Cross-Site Scripting Vulnerability

The D-Link GO-RT-AC750 is a wireless dual-band simple router from China's AUO D-Link. The D-Link GO-RT-AC750 suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in components such as dlapn.cgi and dldongle.cgi, which...

PT-2024-20918 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread versions through 5.0.2 Description: A stack buffer overflow occurs in the net/at/src/at server.c file. Recommendations: For RT-Thread versions through 5.0.2, update to a version that contains a fix for this issue...

PT-2024-20915 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread versions through 5.0.2 Description: A heap buffer overflow occurs in finsh/msh file.c and finsh/msh.c. Recommendations: For RT-Thread versions through 5.0.2, update to a version later than 5.0.2 to resolve the issue...

PT-2024-20920 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread versions through 5.0.2 Description: A buffer overflow occurs in the utilities/rt-link/src/rtlink.c file. Recommendations: For RT-Thread versions through 5.0.2, update to a version that contains a fix for this issue. At the moment,...

PT-2024-20917 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread versions through 5.0.2 Description: An out-of-bounds access occurs in utilities/var export/var export.c. Recommendations: For RT-Thread versions through 5.0.2, update to a version that fixes the out-of-bounds access issue in...

PT-2024-20912 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread versions through 5.0.2 Description: The issue is related to an integer signedness error and resultant buffer overflow in the drivers/wlan/wlan mgmt,c component. Recommendations: For RT-Thread versions through 5.0.2, update to a...

PT-2024-20913 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread versions through 5.0.2 Description: The issue is related to a weak random number generation algorithm used in RT-Thread. The algorithm, defined as seed = 214013L seed + 2531011L; return seed 16 & 0x7FFF;, is implemented in the calc...