php8-8.3.14-1.1 on GA media (moderate)

php8-8.3.14-1.1 on GA media Announcement ID: openSUSE-SU-2024:14521-1 Rating: moderate Cross-References: CVE-2024-11233 CVE-2024-11234 CVE-2024-11236 CVE-2024-8929 CVE-2024-8932 CVSS scores: CVE-2024-11233 SUSE : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H CVE-2024-11233 SUSE : 8.3...

RHEL 9 : OpenShift Container Platform 4.14.41 (RHSA-2024:9623)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:9623 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

govulncheck-vulndb-0.0.20241121T195252-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20241121T195252-1.1 on GA media Announcement ID: openSUSE-SU-2024:14519-1 Rating: moderate Cross-References: CVE-2024-52280 CVE-2024-52282 CVE-2024-52309 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These...

[SECURITY] [DLA 3964-1] intel-microcode security update

Debian LTS Advisory DLA-3964-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost November 24, 2024 https://wiki.debian.org/LTS Package : intel-microcode Version : 3.20240910.1deb11u1 CVE ID : CVE-2024-23984 CVE-2024-24968 Debian Bug : 1081363 A microcode update has bee...

Debian dla-3965 : ghostscript - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3965 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3965-1 [email protected]...

CVE-2024-11632

creationtimestamp| type| source ---|---|--- 2024-11-23 13:34:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113532525086245371...

GHSA-8W49-H785-MJ3C vulnerabilities

Vulnerabilities for packages: py3-tornado, dask-gateway, airflow, kubeflow-pipelines-visualization-server...

Security Bulletin: Security Vulnerabilities in base image packages affect IBM Voice Gateway

Summary Security Vulnerabilities in base image packages affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2024-39338 DESCRIPTION: Axios is vulnerable to server-side request forgery, caused by a flaw with requests for path relative URLs get processe...

BELL-CVE-2024-11234

Bulletin has no description...

MGASA-2024-0369 Updated kernel, kmod-xtables-addons, kmod-virtualbox & bluez packages fix security vulnerabilities

Upstream kernel version 6.6.61 fixes bugs and vulnerabilities. The bluez, kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links...

Security Bulletin: IBM Technical Suppport Appliance - possible security flaws or denial of service

Summary Numerous fixes to the Linux kernel for reported issues related to various security vulnerabilities such as demnial of service, unauthorized access, or leakage of sensitive data. Vulnerability Details CVEID:CVE-2021-43975 DESCRIPTION: Linux Kernel could allow a local authenticated attacker...

BELL-CVE-2024-53072

Bulletin has no description...

BELL-CVE-2024-53051

Bulletin has no description...

BELL-CVE-2024-50284

Bulletin has no description...

Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Business Monitor

Summary IBM WebSphere Application Server is shipped as a component of Business Monitor. Information about the security vulnerabilities affecting WebSphere Application Server have been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

Apple Releases Security Updates for Multiple Products

Apple released security updates to address vulnerabilities in multiple Apple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply necessary updates: i...

Exploit for CVE-2024-52544

Lorex 2K Indoor Wi-Fi Security Camera: RCE Exploit Chain O...

CVE-2024-11179

creationtimestamp| type| source ---|---|--- 2024-11-20 09:40:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113514621035570349 2024-11-20 09:44:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113514635516139263 2024-11-20 12:03:58+00:00| seen| https://t.me/cvedetector/115...

CVE-2024-51871

creationtimestamp| type| source ---|---|--- 2024-11-20 00:52:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113512544824689520...

Apache Tomcat 9.0.96 Cross-Site Scripting

The version of Apache Tomcat installed on the remote host is 9.0.96, 10.1.31 or 11.0.0. It is, therefore, affected by a Cross-Site Scripting XSS due to a previous fix which caused pooled JSP tags not to be released after use which in turn could cause output of some tags not to escaped as expected...