25573 matches found
Malicious code in aio-http-proxy-support (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @klapp-support/widget-interaction (npm)
--- -= Per source details. Do not edit below this line.=-...
Security Bulletin: IBM Event Streams is vulnerable to a denial of service attack due to the Eclipse Vert.x component (CVE-2024-1300).
Summary IBM Event Streams is vulnerable to a denial of service attack due to the Eclipse Vert.x component. Vert. x is a toolkit to build reactive microservices.It is used to create a highly scalable and performant event-driven architecture for managing Kafka clusters. Vulnerability Details...
June 25, 2024—KB5039302 (OS Builds 22621.3810 and 22631.3810) Preview
None None...
CVE-2024-34992
SQL Injection vulnerability in the module "Help Desk - Customer Support Management System" helpdesk up to version 2.4.0 from FME Modules for PrestaShop allows attackers to obtain sensitive information and cause other impacts via 'Tickets::getsearchedtickets'...
AIX is affected by a denial of service due to Python (CVE-2024-0450)
IBM SECURITY ADVISORY First Issued: Mon Jun 24 15:07:51 CDT 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/pythonadvisory10.asc Security Bulletin: AIX is affected by a denial of service due to Python CVE-2024-0450...
CVE-2024-34992: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in the module "Help Desk - Customer Support Management System" helpdesk up to version 2.4.0 from FME Modules for PrestaShop allows attackers to obtain sensitive information and cause other impacts via 'Tickets::getsearchedtickets'...
CVE-2024-34992
SQL Injection vulnerability in the module "Help Desk - Customer Support Management System" helpdesk up to version 2.4.0 from FME Modules for PrestaShop allows attackers to obtain sensitive information and cause other impacts via 'Tickets::getsearchedtickets'...
urllib3 Python Library < 1.26.19, < 2.2.2 (CVE-2024-37891)
urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with 'ProxyManager', the 'Proxy-Authorization' header is only sent to the configured proxy, as expected. However, when sending HTTP requests without using urllib3's proxy support, it's possible to...
CVE-2022-48754
In the Linux kernel, the following vulnerability has been resolved: phylib: fix potential use-after-free Commit bafbdd527d56 "phylib: Add device reset GPIO support" added call to phydeviceresetphydev after the putdevice call in phydetach. The comment before the putdevice call says that the phydev...
CVE-2022-48720
In the Linux kernel, the following vulnerability has been resolved: net: macsec: Fix offload support for NETDEVUNREGISTER event Current macsec netdev notify handler handles NETDEVUNREGISTER event by releasing relevant SW resources only, this causes resources leak in case of macsec HW offload, as...
CVE-2022-48720
In the Linux kernel, the following vulnerability has been resolved: net: macsec: Fix offload support for NETDEVUNREGISTER event Current macsec netdev notify handler handles NETDEVUNREGISTER event by releasing relevant SW resources only, this causes resources leak in case of macsec HW offload, as...
CVE-2022-48720
The CVE-2022-48720 entry concerns the Linux kernel net/macsec offload path. The vulnerability arose because the macsec netdev notify handler did not inform the underlay driver on NETDEV_UNREGISTER, leaking macsec offload resources when HW offload is used. The fix moves offload handling from macse...
CVE-2022-48720
In the Linux kernel, the following vulnerability has been resolved: net: macsec: Fix offload support for NETDEVUNREGISTER event Current macsec netdev notify handler handles NETDEVUNREGISTER event by releasing relevant SW resources only, this causes resources leak in case of macsec HW offload, as...
CVE-2022-48720 net: macsec: Fix offload support for NETDEV_UNREGISTER event
In the Linux kernel, the following vulnerability has been resolved: net: macsec: Fix offload support for NETDEVUNREGISTER event Current macsec netdev notify handler handles NETDEVUNREGISTER event by releasing relevant SW resources only, this causes resources leak in case of macsec HW offload, as...
CVE-2022-48720 net: macsec: Fix offload support for NETDEV_UNREGISTER event
In the Linux kernel, the following vulnerability has been resolved: net: macsec: Fix offload support for NETDEVUNREGISTER event Current macsec netdev notify handler handles NETDEVUNREGISTER event by releasing relevant SW resources only, this causes resources leak in case of macsec HW offload, as...
UBUNTU-CVE-2024-38620
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Remove HCIAMP support Since BTHS has been remove HCIAMP controllers no longer has any use so remove it along with the capability of creating AMP controllers. Since we no longer need to differentiate between AMP an...
CVE-2024-38620
Summary: Linux kernel Bluetooth stack removed HCI_AMP support; with BT_HS removed, AMP controllers are no longer used, leading to removal of AMP capability and hdev->dev_type. What changes: removal of HCI_AMP controllers, elimination of AMP vs Primary differentiation, and associated dev_type f...
thunderbird security update
115.12.1-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build 115.12.1-1 - Update to 115.12.1 build1 115.12.0-2 - Update to 115.12.0 build2 115.12.0-1 - Update to 115.12.0 build1...
CVE-2022-48754
In the Linux kernel, the following vulnerability has been resolved: phylib: fix potential use-after-free Commit bafbdd527d56 "phylib: Add device reset GPIO support" added call to phydeviceresetphydev after the putdevice call in phydetach. The comment before the putdevice call says that the phydev...