13090 matches found
CGA-J59W-876H-7QCQ
Bulletin has no description...
pyspider Cross-Site Request Forgery (CSRF) via the Flask endpoints
binux pyspider up to v0.3.10 was discovered to contain a Cross-Site Request Forgery CSRF via the Flask endpoints...
Multiple Mozilla Product Spoofing Vulnerabilities (CNVD-2024-48565)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A...
RHSA-2024:10734 Red Hat Security Advisory: thunderbird security update
Bulletin has no description...
BELL-CVE-2024-38517
Bulletin has no description...
BELL-CVE-2024-53122
Bulletin has no description...
BELL-CVE-2024-53112
Bulletin has no description...
BELL-CVE-2024-53124
Bulletin has no description...
BELL-CVE-2024-53109
Bulletin has no description...
GHSA-59G5-XGCQ-4QW3 vulnerabilities
Vulnerabilities for packages: reflex...
CVE-2024-53115 drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid nullptrderef in vmwframebuffersurfacecreatehandle The 'vmwuserobjectbuffer' function may return NULL with incorrect inputs. To avoid possible null pointer dereference, add a check whether the 'bo' is NULL in the...
DLA-3981-1 simplesamlphp - security update
Bulletin has no description...
ASB-A-371710871
Bulletin has no description...
ASB-A-364017561
Bulletin has no description...
OPENSUSE-SU-2024:14535-1 python-2.7.18-51.1 on GA media
These are all security issues fixed in the python-2.7.18-51.1 package on the GA media of openSUSE Tumbleweed...
GHSA-GH5C-3H97-2F3Q vulnerabilities
Vulnerabilities for packages: rancher, kubevela, prometheus, vault, amazon-ecs-agent, harvester-fips, k3s, pulumi, amazon-cloudwatch-agent-operator-fips, rancher-agent, rke2-runtime, kubevirt-cdi-uploadserver, amazon-ecs-agent-fips, promxy, amazon-cloudwatch-agent-operator, harvester...
GHSA-2MJ3-VFVX-FC43 vulnerabilities
Vulnerabilities for packages: rancher-machine, kubevela, docker-machine-driver-harvester, pulumi...
CVE-2024-52003 X-Forwarded-Prefix Header still allows for Open Redirect in traefik
Traefik pronounced traffic is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue has been addressed in versions 2.11.14 and 3.2.1. Users are advised to upgrade. There are...
BIT-GITLAB-2024-11668 Insufficient Session Expiration in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 16.11 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. Long-lived connections could potentially bypass authentication controls, allowing unauthorized access to streaming results...