11067 matches found
OPENSUSE-SU-2024:14537-1 ansible-core-2.17-2.17.6-1.1 on GA media
These are all security issues fixed in the ansible-core-2.17-2.17.6-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14534-1 gimp-2.10.38-4.1 on GA media
These are all security issues fixed in the gimp-2.10.38-4.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14535-1 python-2.7.18-51.1 on GA media
These are all security issues fixed in the python-2.7.18-51.1 package on the GA media of openSUSE Tumbleweed...
CVE-2024-52003 vulnerabilities
Vulnerabilities for packages: traefik...
GHSA-Q59J-VV4J-V33C vulnerabilities
Vulnerabilities for packages: pulumi, amazon-cloudwatch-agent-operator, promxy...
[SECURITY] [DLA 3970-1] twisted security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3970-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler November 28, 2024 https://wiki.debian.org/LTS -...
[SECURITY] [DSA 5821-1] thunderbird security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5821-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 27, 2024 https://www.debian.org/security/faq -...
OPENSUSE-SU-2024:14531-1 libjxl-devel-0.11.1-1.1 on GA media
These are all security issues fixed in the libjxl-devel-0.11.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14532-1 libsndfile-devel-1.2.2-3.1 on GA media
These are all security issues fixed in the libsndfile-devel-1.2.2-3.1 package on the GA media of openSUSE Tumbleweed...
gitea -- multiple vulnerabilities
Problem Description: Fix delete branch perm checking Upgrade crypto library...
CVE-2024-10240
An issue has been discovered in GitLab EE affecting all versions starting from 17.3 before 17.3.7, all versions starting from 17.4 before 17.4.4, all versions starting from 17.5 before 17.5.2 in which an unauthenticated user may be able to read some information about an MR in a private project,...
CVE-2024-11828
A denial of service DoS condition was discovered in GitLab CE/EE affecting all versions from 13.2.4 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. By leveraging this vulnerability an attacker could create a DoS condition by sending crafted API calls. This was a regression of an earlie...
CVE-2024-8114
An issue has been discovered in GitLab CE/EE affecting all versions from 8.12 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. This issue allows an attacker with access to a victim's Personal Access Token PAT to escalate privileges...
CVE-2024-11669
An issue was discovered in GitLab CE/EE affecting all versions from 16.9.8 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. Certain API endpoints could potentially allow unauthorized access to sensitive data due to overly broad application of token scopes...
CVE-2024-8177
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.6 prior to 17.4.5, starting from 17.5 prior to 17.5.3, starting from 17.6 prior to 17.6.1 which could cause Denial of Service via integrating a malicious harbor registry...
CVE-2024-11705
creationtimestamp| type| source ---|---|--- 2024-11-26 14:22:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113549700230486413...
CVE-2024-11703 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2024-11704 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CISA Releases Six Industrial Control Systems Advisories
CISA released six Industrial Control Systems ICS advisories on November 26, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-331-01 Schneider Electric PowerLogic PM55xx and PowerLogic PM8ECC ICSA-24-331-02...