CISA Releases One Industrial Control Systems Advisory

CISA released one Industrial Control Systems ICS advisory on March 7, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-067-01 Chirp Systems Chirp Access CISA encourages users and administrators to review the...

SUSE-SU-2024:0785-1 Security update for python3

This update for python3 fixes the following issues: - CVE-2023-40217: Fixed bypass TLS handshake on closed sockets bsc1214692. - CVE-2023-6597: Fixed symlink bug in cleanup bsc1219666...

BIT-NODE-2023-30590

The generateKeys API function returned from crypto.createDiffieHellman only generates missing or outdated keys, that is, it only generates a private key if none has been set yet, but the function is also needed to compute the corresponding public key after calling setPrivateKey. However, the...

Artica Proxy 4.50 Loopback Service Disclosure Vulnerability

Services that are running and bound to the loopback interface on the Artica Proxy version 4.50 are accessible through the proxy service. In particular, the tailon service is running as the root user, is bound to the loopback interface, and is listening on TCP port 7050. Using the tailon service,...

BELL-CVE-2023-52512

Bulletin has no description...

Artica Proxy Loopback Services Remotely Accessible Unauthenticated

Vulnerability Details Affected Vendor: Artica Affected Product: Artica Proxy Affected Version: 4.50 Platform: Debian 10 LTS CWE Classification: CWE-288: Authentication Bypass Using an Alternate Path or Channel, CWE-552: Files or Directories Accessible to External Parties CVE ID: CVE-2024-2056 2...

Type Confusion

Google Chrome is vulnerable to Type Confusion. The vulnerability is due to type confusion in the V8 engine of Google Chrome versions prior to 122.0.6261.94. A remote attacker could potentially exploit this by using a crafted HTML page to corrupt objects, leading to security issues...

Type Confusion

Google Chrome is vulnerable to Type Confusion. The vulnerability is due to type confusion in the V8 engine of Google Chrome versions prior to 122.0.6261.94. A remote attacker could potentially exploit this by using a crafted HTML page to corrupt objects, leading to security issues...

USN-6669-1: Thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing,...

openSUSE: Security Advisory for xen (SUSE-SU-2023:0170-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for jetty (SUSE-SU-2023:4210-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:0705-1 Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059138 fixes several issues. The following security issues were fixed: - CVE-2023-39198: Fixed a race condition leading to a use-after-free in qxlmodedumbcreate bsc1217116. - CVE-2023-51780: Fixed a use-after-free in dovccioctl in net/atm/ioctl.c,...

CentOS 9 : fence-agents-4.10.0-56.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the fence- agents-4.10.0-56.el9 build changelog. - Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity o...

CISA Releases Two Industrial Control Systems Advisories

CISA released two Industrial Control Systems ICS advisories on February 27, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-058-01 Mitsubishi Electric Multiple Factory Automation Products ICSMA-24-058-01...

BELL-CVE-2024-26592

Bulletin has no description...

USN-6649-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2024-1547, CVE-2024-1548,...

November 14, 2023—KB5032196 (OS Build 17763.5122) - EXPIRED

None None...

GHSA-47G3-MF24-6559 vulnerabilities

Vulnerabilities for packages: openjdk-11-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-26-openj9, openjdk-25-openj9...

CVE-2024-20960 vulnerabilities

Vulnerabilities for packages: mysql...

SUSE-RU-2024:0511-1 Recommended update for grafana

This update for grafana fixes the following issues: - Fixed changelog entries for the Bugzilla trackers related to previously implemented security fixes no source code changes...