CVE-2024-45811 server.fs.deny bypassed when using ?import&raw in vite

Vite a frontend build tooling framework for javascript. In affected versions the contents of arbitrary files can be returned to the browser. @fs denies access to files outside of Vite serving allow list. Adding ?import&raw to the URL bypasses this limitation and returns the file content if it...

CVE-2024-45605 Improper authorization on deletion of user issue alert notifications in sentry

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user issue alert notifications for arbitrary users given a know alert ID. A patch was issued to ensure authorization checks are properly scoped on requests to delete user alert...

RHSA-2018:2097 Red Hat Security Advisory: patch security update

Bulletin has no description...

RHSA-2023:0854 Red Hat Security Advisory: kernel-rt security and bug fix update

Bulletin has no description...

RHSA-2018:1188 Red Hat Security Advisory: java-1.8.0-openjdk security update

Bulletin has no description...

CGA-Q4H9-P729-MRPX

Bulletin has no description...

RHSA-2017:2683 Red Hat Security Advisory: kernel security update

Bulletin has no description...

RHSA-2016:1301 Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2010:0986 Red Hat Security Advisory: java-1.4.2-ibm-sap security update

Bulletin has no description...

CVE-2024-6197 affecting package curl for versions less than 8.8.0-2

CVE-2024-6197 affecting package curl for versions less than 8.8.0-2. A patched version of the package is available...

PT-2024-6332

Name of the Vulnerable Software and Affected Versions Spring Framework versions 5.3.0 through 5.3.39 Spring Framework versions 6.0.0 through 6.0.23 Spring Framework versions 6.0.24 through 6.1.12 Spring Framework versions 6.1.13 and earlier Description The vulnerability is related to path travers...

Updated microcode package fix security vulnerabilities

Improper isolation in the IntelR CoreTM Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2023-42667 Improper isolation in some IntelR Processors stream cache mechanism may allow an authenticated user to...

can: mcp251xfd: fix infinite loop when xmit fails

...

filelock: fix potential use-after-free in posix_lock_inode

...

PT-2024-7700 · Tp Link · Tp-Link Tl-Wdr5620

Name of the Vulnerable Software and Affected Versions: TP-LINK TL-WDR5620 version 2.3 Description: A remote code execution RCE vulnerability exists in TP-LINK TL-WDR5620 via the httpProcDataSrv function. This issue allows a remote attacker to execute arbitrary code. The vulnerability occurs due t...

Photon OS 5.0: Linux PHSA-2024-5.0-0370

An update of the linux package has been released. File data PhotonOSPHSA-2024-50-0370linux.nasl...

CVE-2024-45591

XWiki Platform is a generic wiki platform. The REST API exposes the history of any page in XWiki of which the attacker knows the name. The exposed information includes for each modification of the page the time of the modification, the version number, the author of the modification both username...

AZL-49155 CVE-2024-43800 affecting package nodejs-nodemon 2.0.3-5

serve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to redirect may execute untrusted code. This issue is patched in serve-static 1.16.0...

AZL-49088 CVE-2024-43799 affecting package nodejs-nodemon 2.0.3-4

Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect which executes untrusted code. This issue is patched in send 0.19.0...

UBUNTU-CVE-2024-43799

Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect which executes untrusted code. This issue is patched in send 0.19.0...