CVE-2024-21543

Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when the authenticate function fails. This is because the system falls back to querying the database directly, granting access to users with valid credentials, and eventually bypassing custom authentication checks...

OPENSUSE-SU-2024:14574-1 chromedriver-131.0.6778.139-1.1 on GA media

These are all security issues fixed in the chromedriver-131.0.6778.139-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14575-1 curl-8.11.1-1.1 on GA media

These are all security issues fixed in the curl-8.11.1-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE: Security Advisory for buildah (SUSE-SU-2024:4303-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2024:14580-1 liboqs-devel-0.12.0-1.1 on GA media

These are all security issues fixed in the liboqs-devel-0.12.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14582-1 socat-1.8.0.2-1.1 on GA media

These are all security issues fixed in the socat-1.8.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE: Security Advisory (SUSE-SU-2024:4303-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2024:14579-1 gdk-pixbuf-loader-libheif-1.19.5-2.1 on GA media

These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.19.5-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14581-1 python312-3.12.8-1.1 on GA media

These are all security issues fixed in the python312-3.12.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14578-1 gstreamer-plugins-good-1.24.10-2.1 on GA media

These are all security issues fixed in the gstreamer-plugins-good-1.24.10-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14576-1 gstreamer-1.24.10-2.1 on GA media

These are all security issues fixed in the gstreamer-1.24.10-2.1 package on the GA media of openSUSE Tumbleweed...

GHSA-7PRJ-HGX4-2XC3 Potential Vulnerabilities Due to Outdated golang.org/x/crypto Dependency in NanoProxy

A security issue was identified in the NanoProxy project related to the golang.org/x/crypto dependency. The project was using an outdated version of this dependency, which potentially exposed the system to security vulnerabilities that have been addressed in subsequent updates. Impact: The specif...

[SECURITY] [DSA 5829-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5829-1 [email protected] https://www.debian.org/security/ Andres Salomon December 12, 2024 https://www.debian.org/security/faq -...

USN-7156-1: Linux kernel (GKE) vulnerabilities

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. CVE-2024-25741 Several security issues were discovered in the Linux kernel. An...

CISA Releases Ten Industrial Control Systems Advisories

CISA released ten Industrial Control Systems ICS advisories on December 12, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-347-01 Siemens CPCI85 Central Processing/Communication ICSA-24-347-02 Siemens...

OPENSUSE-SU-2024:0406-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 131.0.6778.108 stable released 2024-12-04 boo1234118 - CVE-2024-12053: Type Confusion in V8...

CVE-2024-54527

creationtimestamp| type| source ---|---|--- 2024-12-12 00:59:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113637140264574364 2024-12-12 03:47:11+00:00| seen| https://t.me/cvedetector/12684 2024-12-12 09:59:39+00:00| seen| https://t.me/RussianOSINT/4978 2025-01-09 03:30:03+00:00|...

CVE-2024-8179

An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. Improper output encoding could lead to XSS if CSP is not enabled...

OPENSUSE-SU-2024:14572-1 firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-12570

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.4.6, from 17.5 prior to 17.5.4, and from 17.6 prior to 17.6.2. It may have been possible for an attacker with a victim's CIJOBTOKEN to obtain a GitLab session token belonging to the victim...