2024-12 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5048671)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

December 10, 2024—KB5048685 (OS Builds 22621.4602 and 22631.4602)

None None...

December 10, 2024—KB5048661 (OS Build 17763.6659) - EXPIRED

None None...

December 10, 2024—KB5048703 (OS Build 10240.20857) - EXPIRED

None None...

GeoServer < 2.23.3 Multiples Vulnerabilities

According to its banner, the version of GeoServer running on the remote host is prior to 2.23.3. It is, therefore, affected by Multiples Vulnerabilities : - A Stored Cross-Site Scripting XSS vulnerability in Style Publisher - A Stored Cross-Site Scripting XSS vulnerability in REST Resources API...

CVE-2024-40582

creationtimestamp| type| source ---|---|--- 2024-12-09 15:55:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113623679448406024 2024-12-09 15:55:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113623679462789687 2024-12-09 18:02:53+00:00| seen| https://t.me/cvedetector/124...

CVE-2024-12224 vulnerabilities

Vulnerabilities for packages: helix, samply, cargo-audit, buck2, wasmtime, fnm, netavark, wasmcloud, rye, convco, shadowsocks-rust, wash, linkerd2-proxy, deno, nushell, tealdeer, rust-analyzer, starship, lychee, qdrant, wadm, oranda, sdp-k8s-injector, bat, atuin, xh, zellij, parseable, wizer, ber...

SUSE-SU-2024:4266-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024111 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2024-35905: Fixed int overflow for...

SUSE-SU-2024:4261-1 Security update for the Linux Kernel (Live Patch 50 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122183 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks bsc1229273...

Fixed in Apache Tomcat 11.0.2

Important: Remote Code Execution via write enabled Default Servlet. Mitigation for CVE-2024-50379 was incomplete - CVE-2024-56337 The previous mitigation for CVE-2024-50379 was incomplete. In addition to upgrading to 11.0.2 or later, users running Tomcat on a case insensitive file system with the...

GLSA-202412-02 : Cacti: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202412-02 Cacti: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Cacti. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from...

OPENSUSE-SU-2024:14566-1 squid-6.12-1.1 on GA media

These are all security issues fixed in the squid-6.12-1.1 package on the GA media of openSUSE Tumbleweed...

GLSA-202412-08 : icinga2: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202412-08 icinga2: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Icinga2. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...

Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : WebKitGTK vulnerabilities (USN-7142-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7142-1 advisory. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious...

OPENSUSE-SU-2024:14565-1 python310-Django4-4.2.17-1.1 on GA media

These are all security issues fixed in the python310-Django4-4.2.17-1.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] [DLA 3986-1] php7.4 security update

Debian LTS Advisory DLA-3986-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin December 08, 2024 https://wiki.debian.org/LTS Package : php7.4 Version : 7.4.33-1+deb11u7 CVE ID : CVE-2024-8929 CVE-2024-8932 CVE-2024-11233 CVE-2024-11234 CVE-2024-11236 Debian Bug :...

OPENSUSE-SU-2024:14563-1 pam-1.7.0-2.1 on GA media

These are all security issues fixed in the pam-1.7.0-2.1 package on the GA media of openSUSE Tumbleweed...

SUSE-SU-2024:4250-1 Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-15020024191 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2021-47600: dm btree remove: fix us...

GHSA-8498-2H75-472J vulnerabilities

Vulnerabilities for packages: py3-django...

SUSE-SU-2024:4234-1 Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024108 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2021-47598: schcake: do not call...