5806 matches found
PT-2024-4435
Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software versions prior to the fixed version Description A vulnerability in the Command Line Interface CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary...
Intel® DSA and Intel® IAA Advisory
Summary: A potential security vulnerability in some Intel® Data Streaming Accelerator Intel® DSA and Intel® Analytics Accelerator Intel® IAA V1.0 for some Intel® 4th or 5th generation Xeon® processors may allow escalation of privilege. Intel is releasing prescriptive guidance and software updates...
The US Is Banning Kaspersky
This move has been coming for a long time. The Biden administration on Thursday said it’s banning the company from selling its products to new US-based customers starting on July 20, with the company only allowed to provide software updates to existing customers through September 29. The ban--th...
MGASA-2024-0231 Updated thunderbird packages fix security vulnerabilities
Use-after-free in networking. CVE-2024-5702 Use-after-free in JavaScript object transplant. CVE-2024-5688 External protocol handlers leaked by timing attack. CVE-2024-5690 Sandboxed iframes were able to bypass sandbox restrictions to open a new window. CVE-2024-5691 Cross-Origin Image leak via...
BELL-CVE-2024-38637
Bulletin has no description...
US bans Kaspersky, warns: “Immediately stop using that software”
The US government will ban the sale of Kaspersky antivirus products to new customers in the United States starting July 20, with a follow-on deadline to prohibit the cybersecurity company from providing users with software updates after September 29. The move follows years of allegations that the...
Sony XAV-AX5500 Insufficient Verification of Data Authenticity Remote Code Execution Vulnerability
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of software updates. The issue results from the lack of...
Insyde BIOS June 2024 EDK II Reference Vulnerabilities
Potential EDK II reference code vulnerabilities have been identified in certain HP PC products using Insyde BIOS Insyde H20 UEFI Firmware, which might allow arbitrary code execution. Inysde has released updates to mitigate the potential vulnerabilities. Insyde has released updates to mitigate the...
OPENSUSE-SU-2024:10507-1 libpacemaker-devel-1.1.15+git20161104.b6f251a-1.1 on GA media
These are all security issues fixed in the libpacemaker-devel-1.1.15+git20161104.b6f251a-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11938-1 libwavpack1-32bit-5.4.0-2.1 on GA media
These are all security issues fixed in the libwavpack1-32bit-5.4.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13056-1 ghc-pandoc-3.1.3-2.1 on GA media
These are all security issues fixed in the ghc-pandoc-3.1.3-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10295-1 libXrandr-devel-1.5.1-1.1 on GA media
These are all security issues fixed in the libXrandr-devel-1.5.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13480-1 python310-pandas-2.1.3-1.1 on GA media
These are all security issues fixed in the python310-pandas-2.1.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12041-1 python310-httpx-0.22.0-3.1 on GA media
These are all security issues fixed in the python310-httpx-0.22.0-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13774-1 python310-aiosmtpd-1.4.5-2.1 on GA media
These are all security issues fixed in the python310-aiosmtpd-1.4.5-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10609-1 libSDL_image-1_2-0-1.2.12+hg695-1.12 on GA media
These are all security issues fixed in the libSDLimage-12-0-1.2.12+hg695-1.12 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10887-1 kauth-devel-5.86.0-1.2 on GA media
These are all security issues fixed in the kauth-devel-5.86.0-1.2 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13187-1 owasp-modsecurity-crs-3.3.5-1.1 on GA media
These are all security issues fixed in the owasp-modsecurity-crs-3.3.5-1.1 package on the GA media of openSUSE Tumbleweed...