CGA-6H8G-FVQ5-XC5R

Bulletin has no description...

CGA-627V-H7Q8-7PRW

Bulletin has no description...

CGA-5RRH-VF9H-3JHF

Bulletin has no description...

CGA-5JC9-XVFV-QMMV

Bulletin has no description...

CGA-6V84-WHXP-969C

Bulletin has no description...

CGA-7FQR-94V9-4673

Bulletin has no description...

CGA-4GQ6-P7J9-GHXH

Bulletin has no description...

CGA-4R38-R59M-2MFQ

Bulletin has no description...

CGA-2CV8-X4QM-G845

Bulletin has no description...

HP Display Control Software – Escalation of Privilege

Potential vulnerabilities have been identified in the HP Display Control software component within the HP Application Enabling Software Driver which might allow escalation of privilege. HP is releasing software updates to mitigate these potential vulnerabilities. Update to HP Application Enabling...

PT-2024-26956 · WordPress · Smart Image Gallery

Name of the Vulnerable Software and Affected Versions: Smart Image Gallery WordPress plugin versions prior to 1.0.19 Description: The issue concerns a lack of CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. Recommendations: F...

SUSE-SU-2024:2437-1 Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005536 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spinlock in unixgc bsc1223683. - CVE-2024-26930: Fixed double free of the ha-vpmap pointer bsc1223681. - CVE-2024-26828: Fix...

CGA-GX3R-9PGV-5443

Bulletin has no description...

PT-2024-15953 · WordPress · Social Media Widget

Name of the Vulnerable Software and Affected Versions: Social Media Widget WordPress plugin versions prior to 4.0.9 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for examp...

PT-2024-9098

Name of the Vulnerable Software and Affected Versions: xrdp versions prior to 0.10.0 Description: xrdp is an open source RDP server that has a vulnerability allowing attackers to make an infinite number of login attempts. The number of max login attempts is supposed to be limited by a configurati...

CVE-2024-37151 Suricata defrag: IP ID reuse can lead to policy bypass

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Mishandling of multiple fragmented packets using the same IP ID value can lead to packet reassembly failure, which can lead to policy bypass. Upgrade to 7.0.6 or 6.0.20. When usin...

CGA-VH93-9CFW-92QQ

Bulletin has no description...

CVE-2024-32469 Decidim has cross-site scripting (XSS) in the pagination

Decidim is a participatory democracy framework. The pagination feature used in searches and filters is subject to potential XSS attack through a malformed URL using the GET parameter perpage. This vulnerability is fixed in 0.27.6 and 0.28.1...

CVE-2024-39489

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix memleak in seg6hmacinitalgo seg6hmacinitalgo returns without cleaning up the previous allocations if one fails, so it's going to leak all that memory and the crypto tfms. Update seg6hmacexit to only free the memory...

SUSE-SU-2024:2382-1 Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505001338 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spinlock in unixgc bsc1223683. - CVE-2024-26930: Fixed double free of the ha-vpmap pointer bsc1223681. - CVE-2024-26828: Fix...