RHSA-2023:2167 Red Hat Security Advisory: grafana security and enhancement update

Bulletin has no description...

RHSA-2021:4765 Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.19.0

Bulletin has no description...

DLA-3908-1 debian-security-support - update

Bulletin has no description...

PT-2024-9586

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.24.10 Description A vulnerability has been detected in the format channel mask function in gst-discoverer.c, which can cause an out-of-bounds OOB read. This occurs when the gst discoverer audio info get channels...

RHBA-2021:2979 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.7.23 packages update

Bulletin has no description...

RHSA-2020:2781 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.23 security update

Bulletin has no description...

RHSA-2018:1696 Red Hat Security Advisory: redhat-virtualization-host security update

Bulletin has no description...

RHSA-2016:1433 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.9 update

Bulletin has no description...

RHSA-2015:1905 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.4 update

Bulletin has no description...

RHSA-2013:0193 Red Hat Security Advisory: JBoss Enterprise Application Platform 5.2.0 update

Bulletin has no description...

RHSA-2011:1800 Red Hat Security Advisory: JBoss Enterprise Application Platform 5.1.2 update

Bulletin has no description...

MGASA-2024-0320 Updated libreoffice package fixes security vulnerability

The Certificate Validation user interface in LibreOffice allows a potential vulnerability. Signed macros are scripts that have been digitally signed by the developer using a cryptographic signature. When a document with a signed macro is opened a warning is displayed by LibreOffice before the mac...

maven-archetype-3.3.0-1.1 on GA media (moderate)

maven-archetype-3.3.0-1.1 on GA media Announcement ID: openSUSE-SU-2024:14372-1 Rating: moderate Cross-References: CVE-2024-47197 CVSS scores: CVE-2024-47197 SUSE : 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can no...

RHSA-2024:1862 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.8 security update on RHEL 9

Bulletin has no description...

PT-2024-38020 · Localai · Localai

Name of the Vulnerable Software and Affected Versions: mudler/localai version 2.17.1 Description: The localai backend is susceptible to remote code execution. This occurs because the backend accepts inputs from sources beyond the configuration file, enabling an attacker to upload and execute a...

PT-2024-39148

Name of the Vulnerable Software and Affected Versions: ValeApp versions prior to 2.0.0 Description: The issue is a Session Fixation vulnerability that allows for Brute Force and Session Hijacking. This vulnerability affects the authentication mechanism of the software, potentially allowing...

GHSA-JG74-MWGW-V6X3 Vault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By Default

Vault’s SSH secrets engine did not require the validprincipals list to contain a value by default. If the validprincipals and defaultuser fields of the SSH secrets engine configuration are not set, an SSH certificate requested by an authorized user to Vault’s SSH secrets engine could be used to...

CVE-2024-47130

The goTenna Pro App allows unauthenticated attackers to remotely update the local public keys used for P2P and group messages. It is advised to update your app to the current release for enhanced encryption protocols...

Vulnerabilities fixed in Apple macOS

Apple fixed vulnerabilities in macOS A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Manipulation of data - Circumvention of security measure - Access to sensitive data - Access to system data Fo...

Cisco Unified Threat Defense Snort Intrusion Prevention System Engine for Cisco IOS XE Software Security Policy Bypass and Denial of Service Vulnerability

A vulnerability in Cisco Unified Threat Defense UTD Snort Intrusion Prevention System IPS Engine for Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass configured security policies or cause a denial of service DoS condition on an affected device. This vulnerability is...