CentOS 7 : firefox (RHSA-2020:4080)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4080 advisory. - In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bounds...

October 8, 2024—KB5044284 (OS Build 26100.2033)

None None...

Prototype Pollution

@sentry/browser is vulnerable to Prototype Pollution. The vulnerability is due to inadequate checks on user input or unsafe handling of data within an application when data is not properly validated or sanitized. It allows attackers to manipulate the prototype of objects, leading to potential...

CVE-2024-8927 vulnerabilities

Vulnerabilities for packages: php...

OPENSUSE-SU-2024:14388-1 buildah-1.37.4-1.1 on GA media

These are all security issues fixed in the buildah-1.37.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14387-1 apache-commons-io-2.17.0-2.1 on GA media

These are all security issues fixed in the apache-commons-io-2.17.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14386-1 rusty_v8-0.106.0-1.1 on GA media

These are all security issues fixed in the rustyv8-0.106.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14385-1 MozillaFirefox-131.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-131.0-1.1 package on the GA media of openSUSE Tumbleweed...

Why Fuzzing Isn’t Enough to Test Your APIs for Security Issues

Learn about API testing best practices and find out why fuzzing has limitations for enterprises that need API security...

OPENSUSE-SU-2024:14379-1 libmozjs-115-0-115.4.0-5.1 on GA media

These are all security issues fixed in the libmozjs-115-0-115.4.0-5.1 package on the GA media of openSUSE Tumbleweed...

USN-7022-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Modular ISDN driver; - MMC subsystem; - SCSI drivers; - F2FS file system; - GFS2 file system; -...

USN-7003-5: Linux kernel vulnerabilities

It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could use this to cause a denial of service system crash. CVE-2024-40902 Several security issues were discovered in the Linux kernel. An attacker could...

CVE-2023-3441

An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches...

ASB-A-359692902

Bulletin has no description...

OPENSUSE-SU-2024:14376-1 php8-8.3.12-1.1 on GA media

These are all security issues fixed in the php8-8.3.12-1.1 package on the GA media of openSUSE Tumbleweed...

Unspecified vulnerability in Linux kernel (CNVD-2024-40293)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not checking whether the denominator is zero. No details of the vulnerability are provided at this time...

OPENSUSE-SU-2024:14374-1 argocd-cli-2.12.4-1.1 on GA media

These are all security issues fixed in the argocd-cli-2.12.4-1.1 package on the GA media of openSUSE Tumbleweed...

BELL-CVE-2024-46804

Bulletin has no description...

OPENSUSE-SU-2024:14372-1 maven-archetype-3.3.0-1.1 on GA media

These are all security issues fixed in the maven-archetype-3.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-8974

Information disclosure in Gitlab EE/CE affecting all versions from 15.6 prior to 17.2.8, 17.3 prior to 17.3.4, and 17.4 prior to 17.4.1 in specific conditions it was possible to disclose to an unauthorised user the path of a private project."...