CVE-2024-11607

The GTPayment Donations WordPress plugin through 1.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CGA-R98X-C7CH-HJ4F

Bulletin has no description...

OPENSUSE-SU-2024:14607-1 chromedriver-131.0.6778.204-1.1 on GA media

These are all security issues fixed in the chromedriver-131.0.6778.204-1.1 package on the GA media of openSUSE Tumbleweed...

USN-7179-1: Linux kernel vulnerabilities

Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2020-12351 Andy Nguyen discovered that the...

GHSA-27HP-XHWR-WR2M vulnerabilities

Vulnerabilities for packages: thingsboard...

GHSA-27HP-XHWR-WR2M vulnerabilities

Vulnerabilities for packages: thingsboard...

OPENSUSE-SU-2024:14606-1 teleport-17.1.0-1.1 on GA media

These are all security issues fixed in the teleport-17.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-7173-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7173-2 advisory. Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointe...

Ubuntu 20.04 LTS : Linux kernel (HWE) vulnerabilities (USN-7166-3)

"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7166-3 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...

govulncheck-vulndb-0.0.20241218T202206-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20241218T202206-1.1 on GA media Announcement ID: openSUSE-SU-2024:14603-1 Rating: moderate Cross-References: CVE-2024-12289 CVE-2024-28053 CVE-2024-45338 CVE-2024-48872 CVE-2024-54083 CVE-2024-54682 CVE-2024-55885 CVE-2024-55949 Affected Products: openSUSE Tumbleweed An...

GHSA-M3V4-V2RP-HFM9

creationtimestamp| type| source ---|---|--- 2024-12-19 19:20:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113681106537514551 2024-12-19 19:23:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113681119432889668...

CISA Releases Eight Industrial Control Systems Advisories

CISA released eight Industrial Control Systems ICS advisories on December 19, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-354-01 Hitachi Energy RTU500 series CMU ICSA-24-354-02 Hitachi Energy SDM600...

OPENSUSE-SU-2024:14604-1 logcli-3.3.2-1.1 on GA media

These are all security issues fixed in the logcli-3.3.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14603-1 govulncheck-vulndb-0.0.20241218T202206-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20241218T202206-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu: Security Advisory (USN-7166-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: ghostscript

Issue Overview: PS interpreter - check the type of the Pattern Implementation NOTE: https://bugs.ghostscript.com/showbug.cgi?id=707991 NOTE: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f49812186baa7d1362880673408a6fbe8719b4f8 NOTE:...

AlmaLinux 8 : kernel (ALSA-2024:10943)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:10943 advisory. kernel: selinux,smack: don't bypass permissions check in inodesetsecctx hook CVE-2024-46695 kernel: net: avoid potential underflow in qdiscpktleninit wit...

RockyLinux 9 : postgresql:16 (RLSA-2024:10788)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:10788 advisory. postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID CVE-2024-10978 postgresql: PostgreSQL PL/Perl environment variable...

OPENSUSE-SU-2024:14605-1 tuned-2.24.1.0+git.90c24ee-1.1 on GA media

These are all security issues fixed in the tuned-2.24.1.0+git.90c24ee-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2022-40732

creationtimestamp| type| source ---|---|--- 2024-12-18 22:38:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113676224976008991 2024-12-19 01:25:03+00:00| seen| https://t.me/cvedetector/13276...