26391 matches found
MGASA-2024-0048 Updated clamav packages fix security vulnerabilities
The updated packages fix security vulnerabilities: A possible heap overflow read bug in the OLE2 file parser that could cause a denial-of-service DoS condition. CVE-2024-20290 A possible command injection vulnerability in the "VirusEvent" feature of ClamAV's ClamD service. CVE-2024-20328...
MGASA-2024-0047 Updated xen, qemu and libvirt packages fix security vulnerabilities
This update fixes several security issues and also improves stability...
GHSA-CCGV-VJ62-XF9H vulnerabilities
Vulnerabilities for packages: jenkins...
Updated nodejs yarnpkg packages fix security vulnerabilities
This is a security release. The following CVEs are fixed in this release: CVE-2024-21892 - Code injection and privilege escalation through Linux capabilities- High CVE-2024-22019 - http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks- High CVE-2023-46809 -...
Cybercriminals Weaponizing Open-Source SSH-Snake Tool for Network Attacks
A recently open-sourced network mapping tool called SSH-Snake has been repurposed by threat actors to conduct malicious activities. "SSH-Snake is a self-modifying worm that leverages SSH credentials discovered on a compromised system to start spreading itself throughout the network," Sysdig...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that originates from NULL pointer dereferences...
GHSA-6VQW-3V5J-54X4 vulnerabilities
Vulnerabilities for packages: request-1276, mitmproxy, kubeflow-pipelines, py3-cryptography, airflow, az, py3-cassandra-medusa, ggshield...
GHSA-X989-52FC-4VR4 vulnerabilities
Vulnerabilities for packages: hubble, hubble-ui, hubble-fips...
SUSE-SU-2024:0539-1 Security update for libssh
This update for libssh fixes the following issues: Update to version 0.9.8 jscPED-7719: Fix CVE-2023-6004: Command injection using proxycommand bsc1218209 Fix CVE-2023-48795: Potential downgrade attack using strict kex bsc1218126 Fix CVE-2023-6918: Missing checks for return values of MD functions...
CISA Releases Three Industrial Control Systems Advisories
CISA released three Industrial Control Systems ICS advisories on February 20, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-051-01 Commend WS203VICM ICSA-24-051-02 Ethercat Zeek Plugin ICSA-24-051-03...
Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities
Summary IBM Cloud Transformation Advisor has addressed multiple security vulnerabilities listed herein. Vulnerability Details CVEID:CVE-2023-51074 DESCRIPTION: json-path is vulnerable to a denial of service, caused by a stack-based buffer overflow in the Criteria.parse method. By sending a...
February 13, 2024—KB5034830 (Monthly Rollup)
None None...
November 14, 2023—KB5032199 (OS Build 10240.20308) - EXPIRED
None None...
MGASA-2024-0045 Updated wireshark packages fix security vulnerabilities
The updated packages fix security vulnerabilities: RTPS dissector memory leak. CVE-2023-5371 SSH dissector invalid read of memory blocks. CVE-2023-6174 NetScreen File Parsing Heap-based Buffer Overflow. CVE-2023-6175 GVCP dissector crash via packet injection or crafted capture file. CVE-2024-0208...
Updated wireshark packages fix security vulnerabilities
The updated packages fix security vulnerabilities: RTPS dissector memory leak. CVE-2023-5371 SSH dissector invalid read of memory blocks. CVE-2023-6174 NetScreen File Parsing Heap-based Buffer Overflow. CVE-2023-6175 GVCP dissector crash via packet injection or crafted capture file. CVE-2024-0208...
CVE-2024-21896
creationtimestamp| type| source ---|---|--- 2024-02-20 03:31:51+00:00| seen| https://t.me/ctinow/188074 2024-02-20 03:32:05+00:00| seen| https://t.me/ctinow/188083 2024-02-21 07:07:23+00:00| seen| https://t.me/arpsyndicate/3711 2024-11-14 12:00:00+00:00| seen|...
Security Vulnerabilities fixed in Firefox 123 — Mozilla
When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in an out-of-bounds memory read. Through a series of API calls and redirects, an attacker-controlled alert dialog could have been displayed on another website with the victim...
Mozilla Firefox ESR < 115.8
The version of Firefox ESR installed on the remote Windows host is prior to 115.8. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-06 advisory. - Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.Note:...
MGASA-2024-0044 Updated radare2 packages fix security vulnerabilities
This update fixes two security issues: CVE-2023-4322 - heap-buffer-overflow in the brainfuck dissassembler CVE-2023-5686 - heap-buffer-overflow in /radare2/shlr/java/code.c...