10920 matches found
CVE-2024-0231
A resource misdirection vulnerability in GitLab CE/EE versions 12.0 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1 allows an attacker to craft a repository import in such a way as to misdirect commits...
CVE-2024-41110 vulnerabilities
Vulnerabilities for packages: traefik-fips, argo-workflows, harbor-scanner-trivy-fips, helm-fips, kots, tkn-fips, neuvector-scanner, flux-helm-controller, grype, policy-controller-fips, ctop, buf, dive, k3s, policy-controller, docker-credential-gcr, kaniko, flux, newrelic-infrastructure-agent,...
OPENSUSE-SU-2024:14215-1 libQt5Bootstrap-devel-static-32bit-5.15.14+kde143-1.1 on GA media
These are all security issues fixed in the libQt5Bootstrap-devel-static-32bit-5.15.14+kde143-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2024-4076 vulnerabilities
Vulnerabilities for packages: bind...
Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-6896-5)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6896-5 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free...
Slackware Linux 15.0 / current aaa_glibc-solibs Multiple Vulnerabilities (SSA:2024-205-02)
The version of aaaglibc-solibs installed on the remote host is prior to 2.33 / 2.40. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-205-02 advisory. New glibc packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted...
USN-6903-1: Thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing,...
OPENSUSE-SU-2024:14213-1 java-22-openjdk-22.0.2.0-1.1 on GA media
These are all security issues fixed in the java-22-openjdk-22.0.2.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14211-1 gh-2.53.0-1.1 on GA media
These are all security issues fixed in the gh-2.53.0-1.1 package on the GA media of openSUSE Tumbleweed...
GHSA-3WF2-2PQ4-4RVC Woodpecker's custom environment variables allow to alter execution flow of plugins
Impact The server allow to create any user who can trigger a pipeline run malicious workflows: - Those workflows can either lead to a host takeover that runs the agent executing the workflow. - Or allow to extract the secrets who would be normally provided to the plugins who's entrypoint are...
OPENSUSE-SU-2024:14209-1 python310-sentry-sdk-2.10.0-1.1 on GA media
These are all security issues fixed in the python310-sentry-sdk-2.10.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14202-1 java-17-openjdk-17.0.12.0-1.1 on GA media
These are all security issues fixed in the java-17-openjdk-17.0.12.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14200-1 OpenImageIO-2.5.13.1-1.1 on GA media
These are all security issues fixed in the OpenImageIO-2.5.13.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14203-1 python310-Django-5.0.7-2.1 on GA media
These are all security issues fixed in the python310-Django-5.0.7-2.1 package on the GA media of openSUSE Tumbleweed...
USN-6896-3: Linux kernel vulnerabilities
It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the Atheros 802.11ac...
USN-6900-1: Linux kernel vulnerabilities
It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the HugeTLB file syst...
Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-6896-3)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6896-3 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An...
OPENSUSE-SU-2024:14199-1 ovmf-202402-1.1 on GA media
These are all security issues fixed in the ovmf-202402-1.1 package on the GA media of openSUSE Tumbleweed...
Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-6900-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6900-1 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An...