CGA-2696-JCC9-WG7P

Bulletin has no description...

CGA-H25P-PVRV-VQRF

Bulletin has no description...

CGA-3HV7-G8R7-PMX2

Bulletin has no description...

CGA-8H84-F783-H27H

Bulletin has no description...

CGA-HQ5J-Q73M-QQC9

Bulletin has no description...

CGA-3PFC-CRHW-H2WH

Bulletin has no description...

GO-2024-3218 Content Censorship in the InterPlanetary File System (IPFS) via Kademlia DHT abuse in github.com/libp2p/go-libp2p-kad-dht

Content Censorship in the InterPlanetary File System IPFS via Kademlia DHT abuse in github.com/libp2p/go-libp2p-kad-dht...

CVE-2024-8179 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

CVE-2024-12570 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

CVE-2024-9387 URL Redirection to Untrusted Site ('Open Redirect') in GitLab

An issue was discovered in GitLab CE/EE affecting all versions from 11.8 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. An attacker could potentially perform an open redirect against a given releases API endpoint...

CVE-2024-12570 Privilege Context Switching Error in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.4.6, from 17.5 prior to 17.5.4, and from 17.6 prior to 17.6.2. It may have been possible for an attacker with a victim's CIJOBTOKEN to obtain a GitLab session token belonging to the victim...

CGA-R36X-64C8-7QGF

Bulletin has no description...

CGA-9CQ7-XG7W-MXR8

Bulletin has no description...

MAL-2024-11789 Malicious code in majidalfuttaim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f62a0253b388a37cdf7f07ff7d02dac3e0bbed2516288af419cdcf7218c979b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHSA-2024:10964 Red Hat Security Advisory: ruby security update

Bulletin has no description...

MAL-2024-11810 Malicious code in nextcloud1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd899fc684401040c873b3d7930d347ee05d409f374da1c279b5c717c4340a34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

K000148956: c-ares vulnerability CVE-2016-5180

Security Advisory Description Heap-based buffer overflow in the arescreatequery function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service out-of-bounds write or possibly execute arbitrary code via a hostname with an escaped trailing dot. CVE-2016-5180 Impact There ...

CGA-X8Q5-4432-QQ34

Bulletin has no description...

CVE-2024-12381 vulnerabilities

Vulnerabilities for packages: chromium...

sigstore has insufficient validation of integration timestamp during verification

Summary Versions of sigstore-python newer than 2.0.0 but prior to 3.6.0 perform insufficient validation of the "integration time" present in "v2" and "v3" bundles during the verification flow: the "integration time" is verified if a source of signed time such as an inclusion promise is present, b...