CVE-2024-11623 Stored XSS in authentik

Authentik project is vulnerable to Stored XSS attacks through uploading crafted SVG files that are used as application icons. This action could only be performed by an authenticated admin user. The issue was fixed in 2024.10.4 release...

CVE-2025-20883

CVE-2025-20883 concerns an improper access control flaw in the Samsung SoundPicker component prior to SMR Jan‑2025 Release 1. The root cause is improper access control that allows a physical attacker to access data across multiple user profiles on a device. Reported impact is exposure of data fro...

Fedora 40 : dotnet9.0 (2025-0487787cb9)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-0487787cb9 advisory. This is the January 2025 security and bugfix release for .NET 9.0. It updates the SDK to version 9.0.102 and Runtime to version 9.0.1. Release Notes...

Fedora 41 : dotnet8.0 (2025-bd8f5a599b)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-bd8f5a599b advisory. This is the January 2025 security and bugfix release for .NET 8.0. It updates the SDK to version 8.0.112 and Runtime to version 8.0.12. Release Note...

dendrite -- Server-side request forgery vulnerability

Dendrite team reports: This is a security release, gomatrixserverlib was vulnerable to server-side request forgery, serving content from a private network it can access, under certain conditions...

GHSA-MQF3-QPC3-G26Q Silverstripe Framework has a Reflected Cross Site Scripting (XSS) in error message

!IMPORTANT This vulnerability only affects sites which are in the "dev" environment mode. If your production website is in "dev" mode, it has been misconfigured, and you should immediately swap it to "live" mode. See https://docs.silverstripe.org/en/developerguides/debugging/environmenttypes/ for...

CVE-2024-47605 - XSS via insert media remote file oembed

More info at https://www.silverstripe.org/download/security-releases/cve-2024-47605...

Joomla 3.9.x < 3.10.20 / 4.0.x < 4.4.10 / 5.0.x < 5.2.3 Joomla 5.2.3 Security & Bugfix Release (5919-joomla-5-2-3-security-bugfix-release)

According to its self-reported version, the instance of Joomla! running on the remote web server is 3.9.x prior to 3.10.20, 4.0.x prior to 4.4.10, or 5.0.x prior to 5.2.3. It is, therefore, affected by a vulnerability. - Improper Access Controls allows access to protected views. CVE-2024-40749 No...

Fedora 41 : python3.10 (2024-cae0bcc133)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-cae0bcc133 advisory. Python 3.10.16 security release. Security content in this release -------------------------------- - gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to...

Fedora 41 : python3.9 (2024-47e4624c89)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-47e4624c89 advisory. Python 3.9.21 security release. Security content in this release -------------------------------- - gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to...

Fedora 41 : python3.11 (2024-01d838d947)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-01d838d947 advisory. Python 3.11.11 security release. Security content in this release -------------------------------- - gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to...

Fedora 41 : python3.8 (2024-7a069f48e4)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-7a069f48e4 advisory. This is a security release of Python 3.11 ----------------------------------------- Note: The release you're looking at is Python 3.11.10, a securit...

Fedora 37 : wordpress (2022-245db0c060)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-245db0c060 advisory. Upstream announcement: WordPress 6.1 Misha ---- WordPress 6.0.3 Security Release Security updates included in this release Stored XSS via wp-mail.php post by...

Fedora 41 : python3.11 (2024-ae2925c3ae)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-ae2925c3ae advisory. This is a security release of Python 3.11 ----------------------------------------- Note: The release you're looking at is Python 3.11.10, a securit...

Fedora 36 : varnish (2022-d77f991ed2)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-d77f991ed2 advisory. Automatic update for varnish-7.0.2-1.fc36. Changelog Wed Jan 26 2022 Ingvar Hagelund - 7.0.2-1 - New upstream release. A security release - Includes fix for...

RHSA-2024:8906 Red Hat Security Advisory: Satellite 6.16.0 release

Bulletin has no description...

November 12, 2024—KB5046633 (OS Builds 22621.4460 and 22631.4460)

None None...

November 12, 2024—KB5046613 (OS Builds 19044.5131 and 19045.5131) - EXPIRED

None None...

Fedora: Security Advisory (FEDORA-2024-180560c54b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-204d982a2e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...