3304 matches found
BELL-CVE-2024-53125
Bulletin has no description...
PT-2024-10156 · Gitlab · Gitlab Ce/Ee
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 11.0 through 17.4.6 GitLab CE/EE versions 17.5 through 17.5.4 GitLab CE/EE versions 17.6 through 17.6.2 Description: The issue is related to the GraphQL Mutation Handler component of the GitLab platform, which can lead t...
SUSE-SU-2024:4219-1 Security update for the Linux Kernel (Live Patch 58 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122222 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks bsc1229273. - CVE-2024-41059: hfsplus: fix...
Minify JS - Moderately critical - Cross site request forgery - SA-CONTRIB-2024-070
The Minify JS module allows a site administrator to minify all javascript files that exist in the site's code base and use those minified files on the front end of the website. Several administrator routes are unprotected against Cross-Site Request Forgery CRSF attacks...
CVE-2024-12053 vulnerabilities
Vulnerabilities for packages: chromium...
BELL-CVE-2024-53110
Bulletin has no description...
BELL-CVE-2024-53119
Bulletin has no description...
BELL-CVE-2024-53114
Bulletin has no description...
OT-based ECDSA Protocol Implementation Flaws
github.com/taurusgroup/multi-party-sig is vulnerable to OT-based ECDSA protocol implementation flaws. The vulnerability is due to improper handling of Oblivious Transfer OT operations, allowing an attacker to exploit weaknesses in the OT implementation to compromise private keys or forge digital...
CVE-2024-36623 vulnerabilities
Vulnerabilities for packages: vault, prometheus, harvester, kubevela, harvester-fips, k3s, kubevirt-cdi-uploadserver, amazon-ecs-agent-fips, promxy, pulumi, rancher-agent, amazon-cloudwatch-agent-operator-fips, rke2-runtime, amazon-ecs-agent, amazon-cloudwatch-agent-operator, rancher...
CVE-2024-42326
There was discovered a use after free bug in browser.c in the esbrowsergetvariant function...
CVE-2024-36467
An authenticated user with API access e.g.: user with default User role, more specifically a user with access to the user.update API endpoint is enough to be able to add themselves to any group e.g.: Zabbix Administrators, except to groups that are disabled or having restricted GUI access...
BELL-CVE-2024-53101
Bulletin has no description...
BELL-CVE-2024-21538
Bulletin has no description...
CVE-2024-11692 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
GHSA-QXRP-VHVM-J765 vulnerabilities
Vulnerabilities for packages: nemo...
BELL-CVE-2024-8929
Bulletin has no description...
BELL-CVE-2024-53081
Bulletin has no description...