1566 matches found
Fedora 41 : dr_libs (2024-72a8e64069)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-72a8e64069 advisory. Update to 0^20241216git660795b - drflac 0.12.43: Fix a possible buffer overflow during decoding. Improve detection of ARM64EC. - drmp3 0.6.40: Improve...
Fedora 41 : tomcat (2024-2cb3145f8d)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-2cb3145f8d advisory. Automatic update for tomcat-9.0.98-1.fc41. Changelog for tomcat Mon Dec 09 2024 Packit - 1:9.0.98-1 - Update to version 9.0.98 - Resolves: rhbz2331168 Mon De...
CVE-2024-11896
creationtimestamp| type| source ---|---|--- 2024-12-24 08:22:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113706832008996389 2024-12-24 09:15:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le24avn7s62k 2024-12-24 11:03:29+00:00| seen|...
CVE-2024-53148
In the Linux kernel, the following vulnerability has been resolved: comedi: Flush partial mappings in error case If some remappfnrange calls succeeded before one failed, we still have buffer pages mapped into the userspace page tables when we drop the buffer reference with comedibufmapputbm. The...
CVE-2024-53161
In the Linux kernel, the following vulnerability has been resolved: EDAC/bluefield: Fix potential integer overflow The 64-bit argument for the "get DIMM info" SMC call consists of memctrlidx left-shifted 16 bits and OR-ed with DIMM index. With memctrlidx defined as 32-bits wide the left-shift...
Fedora 41 : mingw-directxmath / mingw-gstreamer1 / etc (2024-0a5722a980)
The remote Fedora 41 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-0a5722a980 advisory. Update to gstreamer-1.24.10, fixes multiple CVEs. Tenable has extracted the preceding description block directly from the Fedora security advisory...
CVE-2023-31280 Exposure of Sensitive Information to an Unauthorized Actor
An AirVantage online Warranty Checker tool vulnerability could allow an attacker to perform bulk enumeration of IMEI and Serial Numbers pairs. The AirVantage Warranty Checker is updated to no longer return the IMEI and Serial Number in addition to the warranty status when the Serial Number or IME...
CVE-2024-12678
Nomad Community and Nomad Enterprise "Nomad" allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16...
CVE-2024-56327
pyrage is a set of Python bindings for the rage file encryption library age in Rust. pyrage uses the Rust age crate for its underlying operations, and age is vulnerable to GHSA-4fg7-vxc8-qx5w. All details of GHSA-4fg7-vxc8-qx5w are relevant to pyrage for the versions specified in this advisory. S...
CVE-2024-56327
pyrage is a set of Python bindings for the rage file encryption library age in Rust. pyrage uses the Rust age crate for its underlying operations, and age is vulnerable to GHSA-4fg7-vxc8-qx5w. All details of GHSA-4fg7-vxc8-qx5w are relevant to pyrage for the versions specified in this advisory. S...
IDOR (Insecure Direct Object Reference) org.springframework:spring-webmvc Dependency in Confluence Data Center and Server
This High severity org.springframework:spring-webmvc Dependency vulnerability was introduced in version 3.0 of Confluence Data Center and Server. This org.springframework:spring-webmvc Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...
Security Bulletin: IBM Security Guardium is affected by an http2-common-9.4.44.v20210927.jar vulnerability (CVE-2023-44487)
Summary IBM Security Guardium has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2023-44487 DESCRIPTION: Multiple vendors are vulnerable to a denial of service, caused by a flaw in handling multiplexed streams in the HTTP/2 protocol. By sending numerous HTTP/2 requests...
CVE-2024-39908 affecting package ruby for versions less than 3.3.5-1
CVE-2024-39908 affecting package ruby for versions less than 3.3.5-1. An upgraded version of the package is available that resolves this issue...
CISCO-SA-20200226-FXOS
creationtimestamp| type| source ---|---|--- 2024-12-17 09:00:31+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113667342596033646...
CISCO-SA-20180606-CUC
creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:53+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666794720949130...
CISCO-SA-20180801-SB
creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:51+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666794553755267...
CISCO-SA-20180620-VCSE
creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:50+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666793809737841...
CISCO-SA-20190821-CCX
creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:50+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666794377807316...