PYSEC-2024-160

lxmlhtmlclean is a project for HTML cleaning functionalities copied from lxml.html.clean. Prior to version 0.4.0, the HTML Parser in lxml does not properly handle context-switching for special HTML tags such as , and . This behavior deviates from how web browsers parse and interpret such tags...

24.02.0 module bug fix and enhancement update

An update is available for qatlib. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Intel QuickAssist Technology Intel QAT provides hardware acceleration for...

CISA Releases One Industrial Control Systems Advisory

CISA released one Industrial Control Systems ICS advisory on November 19, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-324-01 Mitsubishi Electric MELSEC iQ-F Series CISA encourages users and administrators ...

CVE-2024-9850

creationtimestamp| type| source ---|---|--- 2024-11-16 04:25:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113490730319536182 2024-11-16 06:02:27+00:00| seen| https://t.me/cvedetector/11211...

postgresql16-16.5-1.1 on GA media (moderate)

postgresql16-16.5-1.1 on GA media Announcement ID: openSUSE-SU-2024:14505-1 Rating: moderate Cross-References: CVE-2024-10976 CVE-2024-10977 CVE-2024-10978 CVE-2024-10979 CVSS scores: CVE-2024-10976 SUSE : 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2024-10977 SUSE : 3.1...

ansible-core-2.16-2.16.13-1.1 on GA media (moderate)

ansible-core-2.16-2.16.13-1.1 on GA media Announcement ID: openSUSE-SU-2024:14499-1 Rating: moderate Cross-References: CVE-2024-8775 CVE-2024-9902 CVSS scores: CVE-2024-8775 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2024-9902 SUSE : 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A...

CVE-2024-45784

creationtimestamp| type| source ---|---|--- 2024-11-15 08:27:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113486020195398173 2024-11-15 11:04:07+00:00| seen| https://t.me/cvedetector/11050 2024-11-17 06:16:46+00:00| seen| https://t.me/CyberBulletin/26461 2024-11-17 06:16:46+00:00|...

CVE-2024-10924

creationtimestamp| type| source ---|---|--- 2024-11-15 03:21:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113484817218664208 2024-11-15 06:03:04+00:00| seen| https://t.me/cvedetector/11036 2024-11-15 18:00:06+00:00| seen| https://t.me/truesecator/6438 2024-11-17 21:32:48+00:00|...

Ubuntu: Security Advisory (USN-7111-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libvirt-10.9.0-3.1 on GA media (moderate)

libvirt-10.9.0-3.1 on GA media Announcement ID: openSUSE-SU-2024:14490-1 Rating: moderate Cross-References: CVE-2020-12430 CVE-2023-2700 CVSS scores: CVE-2020-12430 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVE-2023-2700 SUSE : 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H Affected...

Fedora 37 : moodle (2022-74a9c8e95f)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-74a9c8e95f advisory. Fixes for multiple CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

SUSE SLES12: libpcp-devel / libpcp3 / libpcp_gui2 / libpcp_import1 / libpcp_mmv1 / etc (SUSE-SU-2024:3976-1)

"The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3976-1 advisory. pcp was updated from version 3.11.9 to version 6.2.0 jscPED-8192, jscPED-8389: - Security issues fixed: CVE-2024-45770: Fixed a...

Intel® Xeon® Processor with Intel® SGX Advisory

Summary: Potential security vulnerabilities in some Intel® Xeon® processors using Intel® Software Guard Extensions Intel SGX may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-23918 Description...

Medium: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: relax socket state check at accept time. CVE-2024-36484 In the Linux kernel, the following vulnerability has been resolved: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."...

GHSA-P2H2-3VG9-4P87 vulnerabilities

Vulnerabilities for packages: gh...

CVE-2024-10979 vulnerabilities

Vulnerabilities for packages: postgresql...

CVE-2024-10976 vulnerabilities

Vulnerabilities for packages: postgresql...

CISA Releases Nineteen Industrial Control Systems Advisories

CISA released nineteen Industrial Control Systems ICS advisories on November 14, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-319-01 Siemens RUGGEDCOM CROSSBOW ICSA-24-319-02 Siemens SIPORT ICSA-24-319-03...

freerdp security update

2:2.11.7-1 - Update to 2.11.7 CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662 2:2.11.2-2 - CVE-2024-22211: Check codec resolution for overflow RHEL-22244...

Fedora 41 : thunderbird (2024-194cb0840b)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-194cb0840b advisory. Update to 128.2.0 https://www.thunderbird.net/en-US/thunderbird/128.2.0esr/releasenotes/ Tenable has extracted the preceding description block...