CVE-2024-5005

An issue has been discovered discovered in GitLab EE/CE affecting all versions starting from 11.4 before 17.2.9, all versions starting from 17.3 before 17.3.5, all versions starting from 17.4 before 17.4.2 It was possible for guest users to disclose project templates using the API...

OPENSUSE-SU-2024:14396-1 libwireshark18-4.4.1-1.1 on GA media

These are all security issues fixed in the libwireshark18-4.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14394-1 MozillaThunderbird-128.3.1-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-128.3.1-1.1 package on the GA media of openSUSE Tumbleweed...

buildah-1.37.4-1.1 on GA media (moderate)

buildah-1.37.4-1.1 on GA media Announcement ID: openSUSE-SU-2024:14388-1 Rating: moderate Cross-References: CVE-2024-9341 CVE-2024-9407 CVSS scores: CVE-2024-9341 SUSE : 5.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N CVE-2024-9341 SUSE : 5.8...

CentOS 7 : thunderbird (RHSA-2021:1350)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:1350 advisory. - Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as wel...

CentOS 7 : firefox (RHSA-2020:4080)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4080 advisory. - In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bounds...

October 8, 2024—KB5044284 (OS Build 26100.2033) for Windows

None None...

Prototype Pollution

@sentry/browser is vulnerable to Prototype Pollution. The vulnerability is due to inadequate checks on user input or unsafe handling of data within an application when data is not properly validated or sanitized. It allows attackers to manipulate the prototype of objects, leading to potential...

CVE-2024-8927 vulnerabilities

Vulnerabilities for packages: php...

OPENSUSE-SU-2024:14388-1 buildah-1.37.4-1.1 on GA media

These are all security issues fixed in the buildah-1.37.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14387-1 apache-commons-io-2.17.0-2.1 on GA media

These are all security issues fixed in the apache-commons-io-2.17.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14386-1 rusty_v8-0.106.0-1.1 on GA media

These are all security issues fixed in the rustyv8-0.106.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14385-1 MozillaFirefox-131.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-131.0-1.1 package on the GA media of openSUSE Tumbleweed...

Why Fuzzing Isn’t Enough to Test Your APIs for Security Issues

Learn about API testing best practices and find out why fuzzing has limitations for enterprises that need API security...

OPENSUSE-SU-2024:14379-1 libmozjs-115-0-115.4.0-5.1 on GA media

These are all security issues fixed in the libmozjs-115-0-115.4.0-5.1 package on the GA media of openSUSE Tumbleweed...

USN-7022-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Modular ISDN driver; - MMC subsystem; - SCSI drivers; - F2FS file system; - GFS2 file system; -...

USN-7003-5: Linux kernel vulnerabilities

It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could use this to cause a denial of service system crash. CVE-2024-40902 Several security issues were discovered in the Linux kernel. An attacker could...

CVE-2023-3441

An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches...

ASB-A-359692902

Bulletin has no description...

Unspecified vulnerability in Linux kernel (CNVD-2024-40293)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not checking whether the denominator is zero. No details of the vulnerability are provided at this time...