Debian Linux Security Advisory 5756-1 - Martin Kaesberger discovered a vulnerability which affects multiple images may result in the disclosure of arbitrary files.
64b20378b7962002c02ddc1884db4d0b2220a0036b6c7f1bc5d70344b242d06fDebian Linux Security Advisory 5755-1 - Martin Kaesberger discovered a vulnerability which affects multiple images may result in the disclosure of arbitrary files.
360b370e36303db20213b39a5d5f2bf176a9a44f71a9f13b0d401d74eb73b0ddDebian Linux Security Advisory 5754-1 - Martin Kaesberger discovered a vulnerability which affects multiple images may result in the disclosure of arbitrary files.
b0280730204e05e7b767da9469ad61ba306d92221452ca68a8ae7de85475df0dDebian Linux Security Advisory 5753-1 - An integer overflow was discovered in aom, the AV1 Video Codec Library, which could potentially result in the execution of arbitrary code if a malformed media file is processed.
9bfe64a59b7e91e8dd5f4b641c6428b296dedcef34390bdbed7d12a46aeee4aeDebian Linux Security Advisory 5752-1 - Two vulnerabilities have been discovered in the IMAP implementation of large headers can result in high CPU usage, leading to denial of service.
e7eafd50429f8363a13065fad5148bcc6e538c7d51cda4f8f11f4471d8c5abe7Ubuntu Security Notice 6965-1 - It was discovered that vim incorrectly handled parsing of filenames in its search functionality. If a user was tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service. It was discovered that vim incorrectly handled memory when opening and searching the contents of certain files. If a user was tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service, or possibly achieve code execution with user privileges.
3c341c32666919171eb7d16361288a0463adc2a98ec0d9780c761bf42fffad49Ubuntu Security Notice 6966-2 - USN-6966-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. It was discovered that Firefox did not properly manage certain memory operations when processing graphics shared memory. An attacker could potentially exploit this issue to escape the sandbox. Nan Wang discovered that Firefox did not properly handle type check in WebAssembly. An attacker could potentially exploit this issue to execute arbitrary code. Irvan Kurniawan discovered that Firefox did not properly check an attribute value in the editor component, leading to an out-of-bounds read vulnerability. An attacker could possibly use this issue to cause a denial of service or expose sensitive information. Rob Wu discovered that Firefox did not properly check permissions when creating a StreamFilter. An attacker could possibly use this issue to modify response body of requests on any site using a web extension.
eec4a312d238e3d86aa21007638aafea8cf37778922c7b1f9397b8f84f12a486Ubuntu Security Notice 6944-2 - USN-6944-1 fixed CVE-2024-7264 for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. This update provides the corresponding fix for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. Dov Murik discovered that curl incorrectly handled parsing ASN.1 Generalized Time fields. A remote attacker could use this issue to cause curl to crash, resulting in a denial of service, or possibly obtain sensitive memory contents.
77a47beaf097ab16089b16982b4f7002ec4d28bc40c1cc3c7e7e592385816a76Online Diagnostic Lab Management System version 1.0 suffers from an arbitrary file upload vulnerability.
978b02141f2137df791b40707a42365e446471161ea7eb4df651cfd5ff222dd8Online Banking System version 1.0 suffers from a cross site request forgery vulnerability.
d6ef5e59a14d85d5065e15e0dfe36e78a2a5106e201a0d423ba61caa290f3643Music Gallery Site version 1.0 suffers from a cross site request forgery vulnerability.
e7fc9c5624c1dad1356f4574a8446ad50503cecc2ee366078fb25a0626c400d4Multi-Vendor Online Groceries Management System version 1.0 suffers from a cross site request forgery vulnerability.
cd6f06db051c71695ba08df0a875654b394dec0642b3caf7cb50e61d1b869c29Medical Center Portal version 1.0 suffers from a cross site request forgery vulnerability.
e8c10a6cb74d4a1578710b60ece740296837eb50dbf941f8d0aacc4f71edf004Ubuntu Security Notice 6970-1 - It was discovered that exfatprogs incorrectly handled certain memory operations. If a user or automated system were tricked into handling specially crafted exfat partitions, a remote attacker could use this issue to cause exfatprogs to crash, resulting in a denial of service, or possibly execute arbitrary code.
7b43efd6efd07051bd5c359ed032f9e7c0f13fd121a0b9724f6be8ce2527e212Event Registration and Attendance System version 1.0 suffers from a cross site request forgery vulnerability.
65110e2d004e268ccfa894e919ab4bb1f1a2cbf59ffc1f83eac5b84d7198c94fCab Management System version 1.0 suffers from a cross site request forgery vulnerability.
eda4038a9624842d7fdcaa4a5f085cedb2454c2dd9c01bd360204e17b2a89308Alphaware E-Commerce System version 1.0 suffers from a code injection vulnerability.
d774af63b3ac654bb19dc15d62b42b3d6735d40e87bc8a84aac08154cd084d00Red Hat Security Advisory 2024-5696-03 - An update for tomcat is now available for Red Hat Enterprise Linux 9.2 Extended Update Support.
a9f4a69ef6d9c1aea5305e24ee2ccde2b97d72a465a02e92de3648c8ed5093d1Red Hat Security Advisory 2024-5695-03 - An update for tomcat is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.
56bab273cae1c8bc153e79ca18a0da3a05125f9028458860f664d886305961feRed Hat Security Advisory 2024-5694-03 - An update for tomcat is now available for Red Hat Enterprise Linux 8.
8ee53a9fff1ab61982f4398bd73dd47bbd013acfa5818eb36cddeb33e298b224Red Hat Security Advisory 2024-5693-03 - An update for tomcat is now available for Red Hat Enterprise Linux 9.
b2381f84bbf8124297b016e26eaf16b672493ee81584df1ee1eb2bc71cfc2fd1Red Hat Security Advisory 2024-5692-03 - An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Issues addressed include a use-after-free vulnerability.
dbf2db58cfe8ade0898445aa3190292161e6df3a9dcafe075523757e366a320bRed Hat Security Advisory 2024-5690-03 - An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Issues addressed include denial of service and heap overflow vulnerabilities.
e0fb9f148dbd92a8345ec111572850ac5309540c70b5210834ed126883f2d01bRed Hat Security Advisory 2024-5689-03 - An update for python3.9 is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Issues addressed include a traversal vulnerability.
b4527aee651de043071d6f9c87cacf9c5e0d860a31199893512d47481eab6ec1Red Hat Security Advisory 2024-5662-03 - An update is now available for Red Hat Satellite 6.15 for RHEL 8.
4f6d1955dd60e5d088d2642595a4addefa8c4bb05d7935e7dc2b060667493f72
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed