CVE-2024-47539

GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the converttos3341a function in isomp4/qtdemux.c. The vulnerability arises due to a discrepancy between the size of memory allocated to the storage array and the loo...

PT-2024-36596 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 9.7-rc-1 through 15.10.10 XWiki Platform versions 16.4.0 through 16.4.0 XWiki Platform versions 16.5.0 is not affected, instead versions prior to 16.5.0 are affected, so the correct range is: XWiki Platform versions...

Remote Desktop Client for Windows Remote Code Execution (December 2024)

The Remote Desktop Client for Windows installed on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

SUSE SLES15 Security Update : SUSE Manager Salt Bundle (SUSE-SU-2024:4021-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4021-1 advisory. venv-salt-minion: - Security fixes on Python 3.11 interpreter: CVE-2024-7592: Fixed quadratic complexity in parsing -quoted cookie values with...

Oracle Linux 9 : python3.12 (ELSA-2024-10978)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10978 advisory. 3.12.5-2.2 - Security fix for CVE-2024-9287 and CVE-2024-12254 Resolves: RHEL-64885, RHEL-70316 Tenable has extracted the preceding description block...

CVE-2024-54494

Root cause: a race condition was addressed with additional validation in CVE-2024-54494. Affected products include Apple operating systems: iPadOS 17.7.3; iOS 18.2; iPadOS 18.2; macOS Sequoia 15.2; macOS Ventura 13.7.2; macOS Sonoma 14.7.2; watchOS 11.2; visionOS 2.2; tvOS 18.2. Issue: an attacke...

CVE-2024-47543

creationtimestamp| type| source ---|---|--- 2024-12-11 19:32:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113635854720381016 2024-12-17 12:51:51+00:00| seen| https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/...

CGA-8XJM-6QW4-RQ5C

Bulletin has no description...

Ivanti Issues Critical Security Updates for CSA and Connect Secure Vulnerabilities

Ivanti has released security updates to address multiple critical flaws in its Cloud Services Application CSA and Connect Secure products that could lead to privilege escalation and code execution. The list of vulnerabilities is as follows - CVE-2024-11639 CVSS score: 10.0 - An authentication...

Patch Tuesday, December 2024 Edition

Microsoft today released updates to plug at least 70 security holes in Windows and Windows software, including one vulnerability that is already being exploited in active attacks. The zero-day seeing exploitation involves CVE-2024-49138, a security weakness in the Windows Common Log File System...

Microsoft Windows Multiple Vulnerabilities (KB5048661)

This host is missing an important security update according to Microsoft KB5048661 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

About the security content of watchOS11.2

About the security content of watchOS11.2 This document describes the security content of watchOS 11.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of macOSVentura13.7.2

About the security content of macOSVentura13.7.2 This document describes the security content of macOS Ventura 13.7.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

About the security content of tvOS18.2

About the security content of tvOS18.2 This document describes the security content of tvOS 18.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Rece...

About the security content of Safari18.2

About the security content of Safari18.2 This document describes the security content of Safari 18.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of iPadOS17.7.3

About the security content of iPadOS17.7.3 This document describes the security content of iPadOS 17.7.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

About the security content of iOS18.2 and iPadOS18.2

About the security content of iOS18.2 and iPadOS18.2 This document describes the security content of iOS 18.2 and iPadOS 18.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

About the security content of macOSSonoma14.7.2

About the security content of macOSSonoma14.7.2 This document describes the security content of macOS Sonoma 14.7.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

About the security content of visionOS2.2

About the security content of visionOS2.2 This document describes the security content of visionOS 2.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

USN-7148-1: Linux kernel vulnerabilities

Lyu Tao discovered that the NFS implementation in the Linux kernel did not properly handle requests to open a directory on a regular file. A local attacker could use this to expose sensitive information kernel memory. Several security issues were discovered in the Linux kernel. An attacker could...