CVE-2024-53675

An XML external entity injection XXE vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases...

CVE-2024-11622

An XML external entity injection XXE vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases...

CVE-2024-11622

An XML external entity injection XXE vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases...

CVE-2024-53675

An XML external entity injection XXE vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases...

CVE-2024-53675

An XML external entity injection XXE vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases...

CVE-2024-53675

CVE-2024-53675 concerns an XML External Entity (XXE) vulnerability in HPE Insight Remote Support . The connected documents consistently describe XXE as the underlying issue and indicate that remote users may disclose information in certain cases. Public details provided include the vulnerability ...

CVE-2024-53674

CVE-2024-53674 relates to an XML External Entity (XXE) processing flaw in Hewlett Packard Enterprise Insight Remote Support. Documents indicate the vulnerability arises from improper XML parsing (getDocumentRootElement) which can allow remote attackers to disclose sensitive files. Notably, exploi...

CVE-2024-53674

An XML external entity injection XXE vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases...

GHSA-7P9F-6X8J-GXXP CRI-O: Maliciously structured checkpoint file can gain arbitrary node access

Impact Patches 1.31.1, 1.30.6, 1.29.8 Workarounds set enablecriusupport = false References Are there any links users can visit to find out more?...

CVE-2024-53673

The CVE-2024-53673 entry affects Hewlett Packard Enterprise Remote Insight Support (DESTA service). The ZDI advisory and related sources describe a deserialization vulnerability in DESTA that requires no authentication and can lead to remote code execution. The vulnerability arises from improper ...

CVE-2024-53673

A java deserialization vulnerability in HPE Remote Insight Support may allow an unauthenticated attacker to execute code...

CVE-2024-11622

An XML external entity injection XXE vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases...

CVE-2024-11622

CVE-2024-11622 is an XML External Entity (XXE) vulnerability in Hewlett Packard Enterprise Insight Remote Support. Several connected sources describe that improper XXE handling allows remote attackers to disclose information from affected installations. The issue affects HPE Insight Remote Suppor...

CVE-2024-11696 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

CVE-2024-11697 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

CVE-2024-11694 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

UBUNTU-CVE-2024-11699

Memory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 133, Firefox ESR...

CVE-2024-11091 Support SVG – Upload svg files in wordpress without hassle <= 1.1.0 - Authenticated (Author+) Stored Cross-site Scripting via SVG File Upload

The Support SVG – Upload svg files in wordpress without hassle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for...

[SECURITY] Fedora 39 Update: libsoup3-3.4.4-3.fc39

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

RHEL 8 : edk2 (RHSA-2024:10272)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:10272 advisory. EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU...