Gentoo Linux Security Advisory 202408-13 - A vulnerability has been discovered in Nokogiri, which can lead to a denial of service. Versions greater than or equal to 1.13.10 are affected.
f05e4d065cd6ae36b53a16250b9139813c9e7ac688f4a2124aac3c7a5539f340Debian Linux Security Advisory 5740-1 - Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, the bypass of sandbox restrictions or an information leak.
520d6fba42b89a191c810e25bbe44547663dee8d77fbb02ba875f841f334ba01This is a proof of concept exploit to bypass two factor authentication in Mailcow versions prior to 2024-07.
bf1ae4179a96942ee298b8815a404b831648737aefc69dfbb375f4f47c292c8aA small firebeam (kaine's risc-v vm) plugin to exploit the CVE-2024-26229 vulnerability that utilizes a vulnerable IOCTL in csc.sys. The vulnerability is used to get kernel R/W memory access to corrupt the KTHREAD->PreviousMode and then to leveraging DKOM to achieve LPE by copying over the token from the system process over to the current process token.
9f6878ee12404e91c2761a16d0607953e678739dbb5d127caea61d9601f020edWordPress PayPlus Payment Gateway plugin versions prior to 6.6.9 suffer from a remote SQL injection vulnerability.
657afce7e5a4b7495e696537764f385fb5e861d21af7c4aeca02127044c458d5Gentoo Linux Security Advisory 202408-12 - A vulnerability has been discovered in Bitcoin, which can lead to a denial of service. Versions greater than or equal to 25.0 are affected.
6e001b798f8e091a9a78dc5058a26a8b546551d924db16353eb60438c13abe28Debian Linux Security Advisory 5739-1 - user able to escalate to the netdev group can load arbitrary shared object files in the context of the wpa_supplicant process running as root.
6e53b687a225ae7fa2fb59167de86aff9d4f52086ffaeb9f1997bea219751ff8Ubuntu Security Notice 6945-1 - Rory McNamara discovered that wpa_supplicant could be made to load arbitrary shared objects by unprivileged users that have access to the control interface. An attacker could use this to escalate privileges to root.
a1469ccd1a0809d92167536b7c7b7a1f6ef54c467f544361227d99a25641d41bGentoo Linux Security Advisory 202408-11 - Multiple vulnerabilities have been discovered in aiohttp, the worst of which could lead to service compromise. Versions greater than or equal to 3.9.4 are affected.
7d539d4590c35028fb20d378da1505761f4b4b2f95b9b7a7c9dd6cb480d6498eGentoo Linux Security Advisory 202408-10 - Multiple vulnerabilities have been discovered in nghttp2, the worst of which could lead to a denial of service. Versions greater than or equal to 1.61.0 are affected.
f7b7293958cac47f3456ce9b6b75de81240539ad233906034ae0e16ac54d9126Gentoo Linux Security Advisory 202408-9 - Multiple vulnerabilities have been discovered in Cairo, the worst of which a denial of service. Versions greater than or equal to 1.18.0 are affected.
a8a2b329d8a919230a74c7eb257969b0606b5ae91ead436757564af7f46231f0Red Hat Security Advisory 2024-5067-03 - An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Issues addressed include double free and null pointer vulnerabilities.
3eeb5700270c28c326188333f5e88de785dd95d96ce30339aba4680b6fa03fbaRed Hat Security Advisory 2024-5065-03 - An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.
0bf2a9b17071da7e4008f70d6d595db3d82358961bb66b79b8f04d029df28cc3Gentoo Linux Security Advisory 202408-8 - A vulnerability has been discovered in json-c, which can lead to a stack buffer overflow. Versions greater than or equal to 0.16 are affected.
31f704d70ecc0a09999df496d90720170c53c9a31db910f8522a91311b513933Gentoo Linux Security Advisory 202408-7 - Multiple vulnerabilities have been discovered in Go, the worst of which could lead to information leakage or a denial of service. Versions greater than or equal to 1.22.3 are affected.
2ccc903a817532e66048ef0c9f0125745b5ac34d11a79d6ecf529ae860f2676dRed Hat Security Advisory 2024-5056-03 - Red Hat Integration Camel K 1.10.7 release and security update is now available.
d1c5b890ac6176e955b94d36df3a4661c584c55bb6ecd6eedd074fe15567441aRed Hat Security Advisory 2024-5054-03 - Red Hat OpenShift Virtualization release 4.16.1 is now available with updates to packages and images that fix several bugs and add enhancements.
c1f691f70f973deddc3e4f2d2d39f23ce729774311b33b8e2df47f3f70518bbcRed Hat Security Advisory 2024-5041-03 - An update for python-urllib3 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.
6b4742b3ae16931ed53ddb4c91cfd99be9af0da0c751a994beee8cf3aec61eedRed Hat Security Advisory 2024-5040-03 - An update for python-setuptools is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Issues addressed include a code execution vulnerability.
8bb6ec3a8888799f1a80510c67c4486b1198a440ca783508db4c4177f306f782Red Hat Security Advisory 2024-5025-03 - Red Hat JBoss Web Server 5.8.1 zip release is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Windows Server.
82beb02ec9626985555a39bc48ca532fec011a8ca2db3dba8eae4b91435b87f5Gentoo Linux Security Advisory 202408-5 - Multiple vulnerabilities have been discovered in Redis, the worst of which may lead to a denial of service or possible remote code execution. Versions greater than or equal to 7.2.4 are affected.
44b89405ab5c4ee37e2bba62129744deb31752d4a37a6369ac2d9cd7a4c01629E-Commerce Site using PHP PDO version 1.0 suffers from a directory traversal vulnerability.
dc27958888a7f9ea33c2b82b09c46ed99740992adc97c22cbcb4c4b71184b5d1Covid-19 Directory on Vaccination System version 1.0 suffers from an ignored default credential vulnerability.
8c38f4e680e6513d62d4303a51a4d7e3eaa5a7bb80e3e87ce8e510bba268a0b9Red Hat Security Advisory 2024-5024-03 - An update is now available for Red Hat JBoss Web Server 5.8 on Red Hat Enterprise Linux versions 7, 8, and 9.
8d7b78180e141e2e953041f666d302a71d8ba5493cf69730072c933cce72c67eRed Hat Security Advisory 2024-5002-03 - An update for python3.11-setuptools is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Issues addressed include a code execution vulnerability.
b984bf52e93837ed2769f0cf61e74a52f1160d59751bf4c303cf3fdde5afb7b6
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed