16956 matches found
BELL-CVE-2024-26811
Bulletin has no description...
PT-2024-10914 · Apache · Apache Zeppelin
Name of the Vulnerable Software and Affected Versions: Apache Zeppelin versions 0.9.0 and prior versions Description: A Cross-Site Request Forgery CSRF issue in the Credential page of Apache Zeppelin allows an attacker to submit malicious requests. Recommendations: For Apache Zeppelin versions...
SUSE-SU-2024:1146-1 Security update for podman
This update for podman fixes the following issues: - CVE-2024-1753: Fixed an issue to prevent a full container escape at build time. bsc1221677...
PT-2024-14535 · Unknown · Modem-Ps-Nas-Ngmm
Name of the Vulnerable Software and Affected Versions: modem-ps-nas-ngmm affected versions not specified Description: The issue is related to incorrect error handling, which could lead to remote information disclosure without requiring additional execution privileges. This is due to a possible...
CVE-2024-31948
In FRRouting FRR through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the bgpd daemon to crash...
BELL-CVE-2024-27437
Bulletin has no description...
BELL-CVE-2024-26813
Bulletin has no description...
PT-2024-25419 · Xuxueli · Xuxueli Xxl-Job
Name of the Vulnerable Software and Affected Versions: Xuxueli xxl-job versions 2.4.0 through 2.4.1 Description: A vulnerability was found in the deserialize function of the file com/xxl/job/core/util/JdkSerializeTool.java of the component Template Handler. This issue leads to injection. The...
GHSA-4V52-7Q2X-V4XJ eyre: Parts of Report are dropped as the wrong type during downcast
In affected versions, after a Report is constructed using wraperr or wraperrwith to attach a message of type D onto an error of type E, then using downcast to recover ownership of either the value of type D or the value of type E, one of two things can go wrong: - If downcasting to E, there remai...
CVE-2024-2380 XSS in graph rendering
Stored XSS in graph rendering in Checkmk 2.3.0b4...
Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) could provide weaker than expected security (CVE-2023-50313)
Summary IBM WebSphere Application Server shipped with Jazz for Service Management JazzSM could provide weaker than expected security for outbound TLS connections.Information about a security vulnerability affecting IBM WebSphere Application Server Traditional have been published in a security...
CVE-2024-28949 DoS via a large number of User Preferences
Mattermost Server versions 9.5.x before 9.5.2, 9.4.x before 9.4.4, 9.3.x before 9.3.3, 8.1.x before 8.1.11 don't limit the number of user preferences which allows an attacker to send a large number of user preferences potentially causing denial of service...
BELL-CVE-2024-26805
Bulletin has no description...
BELL-CVE-2024-26796
Bulletin has no description...
BELL-CVE-2024-26795
Bulletin has no description...
BELL-CVE-2024-26786
Bulletin has no description...
BELL-CVE-2024-26808
Bulletin has no description...
BELL-CVE-2024-31081
Bulletin has no description...