BELL-CVE-2023-52609

Bulletin has no description...

BELL-CVE-2023-52619

Bulletin has no description...

BELL-CVE-2024-26633

Bulletin has no description...

BELL-CVE-2024-1753

Bulletin has no description...

BELL-CVE-2023-52618

Bulletin has no description...

Denial of service via regular expression

Impact All historical installations of django-wiki are vulnerable to maliciously crafted article content, that can cause severe use of server CPU through a regular expression loop. Patches Workarounds Close off access to create and edit articles by anonymous users. References Are there any links...

CVE-2024-27937 glpi Users emails enumeration

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An authenticated user can obtain the email address of all GLPI users. This issue has been patched in version 10.0.13...

BELL-CVE-2023-52610

Bulletin has no description...

BELL-CVE-2023-52614

Bulletin has no description...

CVE-2023-52616 crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init

In the Linux kernel, the following vulnerability has been resolved: crypto: lib/mpi - Fix unexpected pointer access in mpiecinit When the mpiecctx structure is initialized, some fields are not cleared, causing a crash when referencing the field when the structure was released. Initially, this iss...

Information leakage in YAQL

YAQL before 3.0.0 is used in Murano, the Murano service's MuranoPL extension to the YAQL language fails to sanitize the supplied environment, leading to potential leakage of sensitive service account information...

Insecure Variable Substitution

github.com/go-vela/types is vulnerable to Insecure Variable Substitution. The vulnerability arises due to the unexpected behavior of variable substitution combined with insensitive fields like parameters, image, and entrypoint. This allows for bypassing log masking and exposing secrets without...

The vulnerability of the professional video editing software Adobe Premiere Pro, related to recording data beyond the buffer limit in memory, allows a hacker to execute arbitrary code.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the recording of data beyond the buffer limits in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of the current user...

CVE-2024-28054

Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict relative to some mail user agents when there are multiple boundary parameters in a MIME email message. Consequently, there can be an incorrect check for banned files or malware...

Autodesk DWG TrueView Security Vulnerability

Autodesk DWG TrueView is an application from the American company Autodesk. It is used to view and convert 2D and 3D DWG files for free. A security vulnerability exists in Autodesk DWG TrueView, which originates from parsing a maliciously crafted DWG file can lead to a stack-based overflow that c...

PT-2024-20437 · Fusionpbx · Fusionpbx

Name of the Vulnerable Software and Affected Versions: FusionPBX versions prior to 5.2.0 Description: The issue is related to a lack of session validation. Recommendations: For versions prior to 5.2.0, update to version 5.2.0 or later to resolve the issue...

BELL-CVE-2024-2496

Bulletin has no description...

OSV-2024-178 Global-buffer-overflow in dissect_dns_answer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67265 Crash type: Global-buffer-overflow WRITE 4 Crash state: dissectdnsanswer dissectdnscommon dissectdns...

MGASA-2024-0063 Updated irssi packages fix security vulnerabilities

The updated packages fix a security vulnerability: Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of a non-formatted line is concurrent with printing of a formatted line. CVE-2023-29132...

MAL-2024-1124 Malicious code in soundcloud-scrape (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49aa7d872acd9b91dd62d1aec545292c8d638126b53eadcc46435726c1c4215a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...