CVE-2024-53677

CVE-2024-53677 affects Apache Struts 2 (from 2.0.0 up to, but not including, 6.4.0). The root cause is flawed file upload logic that can be manipulated to enable path traversal, potentially allowing a malicious file upload and, under certain conditions, remote code execution (RCE). Public PoCs an...

CVE-2024-50171 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-50171 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-50167 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-50167 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-50110 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-50110 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-49963 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-49963 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-47692 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-47692 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-50244 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-50244 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-50003 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-50003 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-49879 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-49879 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-47720 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-47720 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-50142 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-50142 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-49927 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-49927 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-50134 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-50134 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-49958 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-49958 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-50095 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-50095 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-50302 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-50302 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-49856 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-49856 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

RHEL 8 : java-1.8.0-ibm (RHSA-2024:10926)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10926 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE...

GHSA-VMG2-R3XV-R3XF Simulation of Wasmd message can cause crashing

CWA-2024-009 Severity Low Marginal + Likely^1 Affected versions: - wasmd 0.53.1 Patched versions: - wasmd 0.53.2 please note that wasmd 0.53.1 is broken and must not be used Description of the bug Blank for now. We'll add more detail once chains had a chance to upgrade. Mitigations Apart from...

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview drupal/core is an an open source content management platform powering millions of websites and applications. Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes through the deserialization process. An attacker...